[Wireshark-dev] Feature request for LUA dissector(s)

2019-06-25 Thread Helge Kruse
re attention? Is there any workaround? Best regards, Helge ___ Sent via:Wireshark-dev mailing list Archives:https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/optio

[Wireshark-dev] Conversation tracking in LUA dissector

2019-05-25 Thread Helge Kruse
/bugzilla/show_bug.cgi?id=15396 Do you have any other idea how to save information of a session? Best regards, Helge ___ Sent via:Wireshark-dev mailing list Archives:https://www.wireshark.org/lists/wiresha

Re: [Wireshark-dev] size_t under Windows ...

2017-11-24 Thread Helge Kruse
uf in the #ifdef(_WIN32) branch. Regards Helge ___ Sent via:Wireshark-dev mailing list Archives:https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshar

Re: [Wireshark-dev] Tips regarding measuring function execution times

2017-10-16 Thread Helge Kruse
there is no C++ interface necessary tp Access QPC/QPF. (https://msdn.microsoft.com/en-us/library/windows/desktop/ms644904(v=vs.85).aspx) See also: https://msdn.microsoft.com/en-us/library/windows/desktop/dn553408(v=vs.85).aspx Regards Helge 2017-10-16 8:34 GMT+02:00 Paul Offord : > Hi Rol

Re: [Wireshark-dev] Is there any way to do session wise listing in wireshark?

2015-07-12 Thread Helge Kruse
ng, please elaborate. Regards Helge ___ Sent via:Wireshark-dev mailing list Archives:https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mail

Re: [Wireshark-dev] hadoop dissector

2015-07-03 Thread Helge
t it would be a waste of time to mimic all of them in C. Probably my dissectors won't get to the Wireshark master source code. But I can live with my plug-ins. Some of them implement a proprietary protocol anyway. Best regards Helge

[Wireshark-dev] MAC address field

2015-06-11 Thread Helge Kruse
hows this as "LG bit: Globally unique address". Best regards Helge smime.p7s Description: S/MIME cryptographic signature ___ Sent via:Wireshark-dev mailing list Archives:https://www.wireshark.org/lists/wi

Re: [Wireshark-dev] PVS-Studio analysis of Wireshark

2015-06-05 Thread Helge Kruse
manner by different member of the Wireshark developers? I don't know if PVS is even worth doing this. It just came in mind, anyway they would get their review. Regards Helge Cite: Thanks for your interest to PVS-Studio! Unfortunately PVS-Studio is not designed for single develop

Re: [Wireshark-dev] Migrating dissector to WS 1.12

2015-05-20 Thread Helge Kruse
’t it the job of the get_pdu_len function to get the correct number of byte of a pdu? Best regards Helge From: wireshark-dev-boun...@wireshark.org [mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Pascal Quantin Sent: Wednesday, May 20, 2015 7:04 PM To: Developer support list for W

[Wireshark-dev] Migrating dissector to WS 1.12

2015-05-20 Thread Helge Kruse
Hi, I am migrating from WS 1.6 to WS 1.12 skipping all version between. I have some code that uses functions that are not available in the current version. How can I find how this functions are replaced by newer functions? Example: tvb_get_ephemeral_string() Regards Helge -- PGP Fingerprint

[Wireshark-dev] Utilize the pdb files

2015-05-14 Thread Helge Kruse
l-versions/Wireshark-pdb-win64-1.12.5.zip or the .pdb file for the .exe in https://www.wireshark.org/download/win64/all-versions/Wireshark-win64-1.12.5.exe ? Regards Helge -- PGP Fingerprint: EDCE F8C8 B727 6CC5 7006 05C1 BD3F EADC

[Wireshark-dev] Utilize the pdb files

2015-05-14 Thread Helge Kruse
load/win64/all-versions/Wireshark-pdb-win64-1.12.5.zip  or the .pdb file for the .exe in https://www.wireshark.org/download/win64/all-versions/Wireshark-win64-1.12.5.exe ?   Regards Helge   ___ Sent via:Wireshark-d

[Wireshark-dev] Ungerister hfinfo fields

2012-07-25 Thread Helge Kruse
proto_unregister_field. Hence this functionality is not supported for dissector plug-ins. Can you please add proto_unregister_field to the export list in libwireshark.def? Thanks, Helge ___ Sent via:Wireshark-dev mailing list Archives

[Wireshark-dev] Missing link

2012-07-14 Thread Helge Kruse
Hello, on the page http://www.wireshark.org/develop.html is a link to the "Developer's Guid has complete documentation". The link address is http://www.wireshark.org/docs/wsdg_html/#ChSrcSend but there is no corresponding target.

[Wireshark-dev] compiling 1.8.0 on Win7

2012-07-02 Thread Helge Kruse
t since Wireshark 1.6.2? Regards Helge ___ Sent via:Wireshark-dev mailing list Archives:http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev ma

Re: [Wireshark-dev] SPX protocol subdissector

2011-11-25 Thread Helge Kruse
packets with an OUI of 00:00:00, > etc.), and most fields don't have dissector tables associated with them. > > > I fear you can't register your dissector without changing packet-ipx.c. > > ...by adding a new dissector table and code to use it. ... what requires that yo

Re: [Wireshark-dev] Debugging on Windows

2011-11-12 Thread Helge Kruse
think that the express versions come without a debugger. Probably there is a debugger in the Windows SDK, but this should match your compiler version. Helge - Original Message - From: "Andreas Sikkema" To: Sent: Saturday, November 12, 2011 12:59 PM Subject: [Wireshark-

Re: [Wireshark-dev] Looking for a Wireshark Plugin Tool Developer?

2011-11-11 Thread Helge Kruse
details? - Should you plug-in be a DLL for Windows or a shared library for a Unix-like operating system? - If it's for Windows, which compiler do you need to support? - Is it a protocol based on UDP or TCP? - Can you provide some details about the protocol? Kind regards,

Re: [Wireshark-dev] include "tvbuff.h" failed

2011-10-14 Thread Helge Kruse
> #endif You should remove the "#ifdef HAVE_CONFIG_H", config.h is always used. Regards, Helge -- Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de

Re: [Wireshark-dev] Correct and efficient way of displaying bit fields?

2011-10-08 Thread Helge Kruse
have such one-bit fields I put them in an array and use a loop over this field and call proto_tree_add_boolean for each iteration. This saves code lines. But when the field size varies, you will need individual code lines. Helge

Re: [Wireshark-dev] Wireshark dissectors implementation with LUA

2011-10-03 Thread Helge Kruse
Am 01.10.2011 11:14, schrieb Stig Bjørlykke: On Sat, Oct 1, 2011 at 10:59 AM, Helge Kruse wrote: Where do I find good samples or tutorials to get a glimpse of Lua dissectors? You can have a look at this presentation: http://sharkfest.wireshark.org/sharkfest.09/DT06_Bjorlykke_Lua%20Scripting

[Wireshark-dev] Wireshark dissectors implementation with LUA

2011-10-01 Thread Helge Kruse
http://wiki.wireshark.org/Lua shows links to Lua basics and Wireshark's Lua API, but unfortunately it doesn't include dissector examples. Regards, Helge ___ Sent via:Wireshark-dev mailing list Archives:http://www.wire

Re: [Wireshark-dev] Problem in building Plugin

2011-09-22 Thread Helge Kruse
age box you've sent. Regards, Helge ___ Sent via:Wireshark-dev mailing list Archives:http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto

Re: [Wireshark-dev] Problem in building Plugin

2011-09-22 Thread Helge Kruse
to compile to .obj files after the verification. BTW: You have used char[18] with this line: "Message fragments" Regards, Helge ___ Sent via:Wireshark-dev mailing list Archives:http://www.wireshark.org/lis

Re: [Wireshark-dev] Wireshark 1.6.2 is now available

2011-09-08 Thread Helge Kruse
development release should be 1.7.x. What's my fault with this thinking? Regards, Helge ___ Sent via:Wireshark-dev mailing list Archives:http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wire

Re: [Wireshark-dev] Problem compiling Wireshark 1.6.1

2011-08-27 Thread Helge Kruse
Am 22.08.2011 22:24, schrieb Andreas: mt.exe -nologo -manifest "zlib1.dll.manifest" -outputresource:zlib1.dll;2 The last command always crashes. The tool mt.exe loads zlib1.dll to memory and doesn't find the correct run-time library. This behavior is the same when I compile any other (not Wire

Re: [Wireshark-dev] Problem compiling Wireshark 1.6.1

2011-08-27 Thread Helge Kruse
Am 24.08.2011 11:32, schrieb Guy Harris: On Aug 24, 2011, at 1:52 AM, Graham Bloice wrote: Is there any error message at all from the build after the call to mt.exe? No. From your command prompt after the build fails what is the output from "where mt.exe"? C:\Program Files\Microsoft SDKs

Re: [Wireshark-dev] Compiling Wireshark for Win32

2011-08-15 Thread Helge Kruse
Am 16.08.2011 00:01, schrieb Gerald Combs: On 8/12/11 1:25 AM, Helge Kruse wrote: @Gerald, the ZIP file with the PDBs are ~13 Megabyte in size. Would it be possible to add the import libraries to the archive in one of the next versions? The libwireshark.lib has only 266kByte while the PDB has

Re: [Wireshark-dev] Compiling Wireshark for Win32

2011-08-12 Thread Helge Kruse
binding". May be interesting: http://msdn.microsoft.com/en-us/magazine/bb985014.aspx Helge -- Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de ___

Re: [Wireshark-dev] Compiling Wireshark for Win32

2011-08-12 Thread Helge Kruse
f the next versions? The libwireshark.lib has only 266kByte while the PDB has 10MByte. The PDB files must have a matching timestamp to be used from Visual Studio. The import library can be generated later as I've shown. But it would be a bit convenient, to have it along with the PDB f

Re: [Wireshark-dev] Question about UDP checksum

2011-08-05 Thread Helge Kruse
You've forgotten to include the UDP payload in your calculation. For the calculation the pseudo header must be in front of UDP header and UDP payload. Helge Original-Nachricht > Datum: Fri, 5 Aug 2011 15:45:38 +0200 > Von: "news.gmane.com" > An: wir

Re: [Wireshark-dev] Feature request

2011-08-04 Thread Helge Kruse
eration of a new set of dissectors. Helge ___ Sent via:Wireshark-dev mailing list Archives:http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wir

[Wireshark-dev] Feature request

2011-08-04 Thread Helge Kruse
ce to have a possibility to display the capture filter (as entered in dialog) while the capture is running. Helge -- Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.g

Re: [Wireshark-dev] mix of c and C++

2011-07-27 Thread Helge Kruse
Am 27.07.2011 18:35, schrieb Stephen Fisher: On Tue, Jul 19, 2011 at 08:23:51AM +0200, Helge Kruse wrote: @all: What is the sense behind the HAVE_CONFIG_H if I need it anyway? config.h is only used on Unix, so only Unix builds need to include it. This is not true. The file config.h defines

Re: [Wireshark-dev] no vresion symbol

2011-07-21 Thread Helge Kruse
Am 21.07.2011 16:06, schrieb sagar Guledagudda: hi I am getting an error as " *The plugin has no version symbol* " during the start up of wireshark . is that the wireshark version problem or any missing library during compilation ? if anybody have idea please reply Congratulation!, you manage

Re: [Wireshark-dev] Bad package created from 1.7.0

2011-07-20 Thread Helge Kruse
that a Windows update installed new versions of the runtime in Visual Studio as a bugfix. I am uncertain where the installer grabs the runtime libraries that must be installed on the target machine. Probably this must be

Re: [Wireshark-dev] override config.nmake

2011-07-19 Thread Helge Kruse
Am 19.07.2011 15:32, schrieb Bill Meier: On 7/19/2011 9:15 AM, Helge Kruse wrote: Is there a way to get the wiresharklibs to a different location without modifying the files that I get from the repository? Yes: Set a value foe WIRESHARK_LIBS in the environment and then do nmake /E ... set

[Wireshark-dev] override config.nmake

2011-07-19 Thread Helge Kruse
from http://anonsvn.wireshark.org/wireshark/releases/wireshark-1.6.0 - setup the build environment like WIRESHARK_TARGET_PLATFORM - call nmake -f Makefile.nmake Is there a way to get the wiresharklibs to a different location without modifying the files that I get from the repository? Helge

Re: [Wireshark-dev] mix of c and C++

2011-07-19 Thread Helge Kruse
Am 19.07.2011 12:02, schrieb sagar Guledagudda: now i am getting linker error like : undefined reference to `proto_register_protocol' : undefined reference to `proto_register_field_array' : undefined reference to `proto_register_subtree_array' : undefined reference to `register_dissector' : unde

Re: [Wireshark-dev] mix of c and C++

2011-07-18 Thread Helge Kruse
Am 19.07.2011 07:10, schrieb sagar Guledagudda: I am compiling it for linux ( xxx.so file ) Includes files are as below #ifdef HAVE_CONFIG_H # include "config.h" #endif #include #include #include // fastfix API #include #include CC = g++ CFLAGS = $(INCS) -fPIC $(PLUGIN) : $(OBJS)

Re: [Wireshark-dev] mix of c and C++

2011-07-18 Thread Helge Kruse
18, 2011 at 6:53 PM, Helge Krusewrote: Am 18.07.2011 11:24, schrieb sagar sg: hello, My Dissector is in C++ and internally uses wireshark libraries ( eg: epan ) , Is there any way to wrote makefile such that we can mix the gcc and g++ compilers for particular type of code to be

Re: [Wireshark-dev] mix of c and C++

2011-07-18 Thread Helge Kruse
Am 18.07.2011 11:24, schrieb sagar sg: hello, My Dissector is in C++ and internally uses wireshark libraries ( eg: epan ) , Is there any way to wrote makefile such that we can mix the gcc and g++ compilers for particular type of code to be compiled with corresponding compiler ?? Thanks

Re: [Wireshark-dev] error in epan/tfs.h

2011-07-18 Thread Helge Kruse
C" { #include #include } Helge ___ Sent via:Wireshark-dev mailing list Archives:http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailt

Re: [Wireshark-dev] Filter for generated items

2010-11-18 Thread Helge Kruse
Am 16.11.2010 21:45, schrieb Stephen Fisher: > On Tue, Nov 16, 2010 at 09:13:57PM +0100, Helge Kruse wrote: > >> But I cannot convince anybody to update there 1.2.x installations to >> 1.4.x. >> >> So I must now decide if I have to provide a DLL compile with the 1

Re: [Wireshark-dev] foo dissector of the dev guide

2010-11-18 Thread Helge Kruse
27;m working with > these Frames an modify them in a HEX Editor for testing.. > Have you considered to use text2pcap? Since the source text editor is always open this might be helpful. Helge -- GMX DSL Doppel-Flat ab 19,99 €/mtl.! Jetzt auch mit gratis Notebook-Flat!

Re: [Wireshark-dev] Filter for generated items

2010-11-16 Thread Helge Kruse
Am 16.11.2010 19:05, schrieb Stephen Fisher: > On Tue, Nov 16, 2010 at 06:37:32PM +0100, Helge Kruse wrote: >> Is it guaranteed that a 1.2.x plugin runs with Wireshark 1.4.x? > > Jaap and Joerg are referring to the same stable branch, so any newer > version of 1.2.x than the one

Re: [Wireshark-dev] Filter for generated items

2010-11-16 Thread Helge Kruse
ation (column id) and in incompatible prototype. Both made it impossible to pass this version borders. Well, the 0.99.x was not a stable branch, but this changes creates fear to run a plugin in a different version. Is it guaranteed that a 1.2.x plugin runs with Wireshark 1.4.x? Regards, Helge

Re: [Wireshark-dev] Filter for generated items

2010-11-15 Thread Helge Kruse
ml > > That fix is scheduled for inclusion in the 1.4.2 and 1.2.13 releases. > Thank you for fixing. But since I need to deploy the DLL to existing Wireshark installations, this would not help in this case. I cannot force to install a specific version of Wireshark just to

Re: [Wireshark-dev] Filter for generated items

2010-11-14 Thread Helge Kruse
o_tree_add_string_format > Olivier, this functions allows filter as well as packet find. And I can use it in existing Wireshark installations. Mercie, Helge -- Neu: GMX De-Mail - Einfach wie E-Mail, sicher wie ein Brief! Jetzt De-Mail-Adresse reservieren: http://

[Wireshark-dev] Filter for generated items

2010-11-14 Thread Helge Kruse
and find? Regards, Helge ___ Sent via:Wireshark-dev mailing list Archives:http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev

[Wireshark-dev] Filter for generated items

2010-11-14 Thread Helge Kruse
and find? Regards, Helge ___ Sent via:Wireshark-dev mailing list Archives:http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev