Re: [Wireshark-dev] JXTA dissector memory leak?

2007-03-28 Thread Andrej Mikus
On Wed, 28.Mar.07 16:41:59 -0700, Stephen Fisher wrote: The dissector file packet-jxta.c has a comment saying that an allocation is a memory leak: if (NULL != found_addr) { found_addr-type = AT_URI; found_addr-len = strlen(*current_token); /* FIXME 20050605 bondolo

[Wireshark-dev] Expert info missing entries

2007-03-26 Thread Andrej Mikus
Team, I came across a problem that is described in posting http://www.wireshark.org/lists/wireshark-dev/200607/msg04326.html I can confirm that the change as described there works, e.g. in expert_dlg_init() I call: cf_redissect_packets(cfile); instead of cf_retap_packets(cfile, FALSE); I

Re: [Wireshark-dev] Getting destination IP

2007-03-20 Thread Andrej Mikus
Is your question somehow related to development of Wireshark? I am afraid you are not asking at the best place. Purpose of Wireshark is to analyze packets. The command mentioned below gives brief display of the data. If you do not need all that info, consider using other commands to process it

Re: [Wireshark-dev] Fun with Cisco DLT-value usage

2007-03-20 Thread Andrej Mikus
I believe the issue could be reported to Cisco TAC requesting correction, instead of hacking heuristics. At the other hand, did they announce somewhere that they are using libpcap format? I was googling a bit and found indications how to convert the file

Re: [Wireshark-dev] [patch] address_to_str_buf not checking available buffer length

2007-01-31 Thread Andrej Mikus
Accepted or not, I needed to do something to get my working copy compiled. Attached is the patch if you like to use it. Thanks Andrej On Wed, 31.Jan.07 12:29:30 +0100, Andrej Mikus wrote: On Mon, 29.Jan.07 12:49:00 -0800, Gerald Combs wrote: Andrej Mikus wrote: In file to_str.c I notice

[Wireshark-dev] [PATCH] Bogus length reported for reassembled UDP packets

2007-01-31 Thread Andrej Mikus
Hi, Wireshark complains about bogus udp length when processing last fragment of UDP data. It compares length field from UDP header with payload size of last fragment. Attached is my attempt to fix this by referring to tvp-length instead of pinfo-iplen - pinfo-iphdrlen. Not entirely sure if it is

Re: [Wireshark-dev] packet statistics screen

2007-01-31 Thread Andrej Mikus
My suggestion would be tshark -z io,stat,60 -q -r capturefile and then sort accordingly. I am new here, but I feel that this type of question is perhaps better for user list rather than dev. Andrej On Wed, 31.Jan.07 12:12:05 -0500, Aamer Akhter wrote: Hello, I'm looking at the ethereal

Re: [Wireshark-dev] Prevent recursive IP dissector to fill summary columns

2007-01-27 Thread Andrej Mikus
The change is unfortunately not working with HTTP, the dissector is setting COL_INFO as not writable and further modification of the info field fails. Will try to set fence before running sub dissector. Andrej On Sat, 27.Jan.07 02:54:45 +0100, Andrej Mikus wrote: Hi, In the meantime I found

Re: [Wireshark-dev] Warning about radius directory

2007-01-27 Thread Andrej Mikus
dissectors at various layers. Andrej On Sat, 27.Jan.07 03:52:25 +0100, Luis Ontanon wrote: On 1/27/07, Andrej Mikus [EMAIL PROTECTED] wrote: Thanks for comments. Of course, I removed the message to stop coming out after I realized that it is coming before preferences. Creating file

[Wireshark-dev] Warning about radius directory

2007-01-26 Thread Andrej Mikus
Team, I notice that wireshark emits unconditionally warning mentioning that it Could not find the radius directory. I do not think that radius dictionary is needed for operation in all environments, is is possible to move this output to some kind of diagnostics mode? Based on my search, it

Re: [Wireshark-dev] Prevent recursive IP dissector to fill summary columns

2007-01-26 Thread Andrej Mikus
that the functionality I was looking for it (partially) achieved by flag in_error_pkt. Also found information about modification of info column. To conclude, the attached patch would be acceptable? Thanks Andrej On Mon, 22.Jan.07 10:37:20 +0100, Andrej Mikus wrote: Team, While troubleshooting wccp

[Wireshark-dev] Prevent recursive IP dissector to fill summary columns

2007-01-22 Thread Andrej Mikus
Request, Fragment: Single, FragLen: 100, Call: 1 Ctx: 0 Many thanks for your cooperation Andrej Mikus grepacket.pcap Description: Binary data ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo

[Wireshark-dev] Wccp dissector update

2007-01-14 Thread Andrej Mikus
are using Windows build of Ethereal or Wireshark. I have also found information about builing Windows binary with Cygwin gcc that does not need cygwin.dll. Is it possible to build an independent plugin with this environment? Many thanks for any cooperation. Andrej Mikus

Re: [Wireshark-dev] Build with Cygwin

2007-01-14 Thread Andrej Mikus
On Mon, 15.Jan.07 00:09:55 +0100, Ulf Lamping wrote: Andrej Mikus wrote: I've got source tree downloaded, compiled with some changes and running under Linux. My Windows development experience is quite limited, I used just Cygwin so far. In the documentation I see that gcc under Cygwin can