Re: [Wireshark-dev] Communication between Dissectors

2008-04-29 Thread Martin Peylo
Hi Barry, can /* Get reported length of buffer */ extern guint tvb_reported_length(tvbuff_t*); from tvbuff.h give you the information you need? HTH, Martin On 4/28/08, Barry Constantine [EMAIL PROTECTED] wrote: Hello All, I am not a developer per se, but wrote simple dissector

Re: [Wireshark-dev] How to reassemble in dissector plugins if fixed len part is split ?

2008-03-11 Thread Martin Peylo
Hi, when I read your mail it came to me that I've read something like this before. Does the following bug describe your problem? http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1124 Best regards, Martin On 3/11/08, Merlin Hooze [EMAIL PROTECTED] wrote: Hi, For a disector plugin, if the

Re: [Wireshark-dev] build under ubuntu

2008-02-07 Thread Martin Peylo
Hi, if you'd tell what you were doing before getting this error, someone could tell you what you're doing wrong... Anyway, do the following steps to work with the Wireshark sources on a Debian flavour distribution like Ubuntu: You have to get the Wireshark dev dependencies by doing:

Re: [Wireshark-dev] Get Captured Data

2007-12-06 Thread Martin Peylo
Hi Rene, I'm not getting what you want to achieve in the end. What is your tool supposed to do with the captured and *dissected* packages? Are you just interested in specific fields of protocols which can already be dissected by Wireshark? What OS are you running? On Linux/Unix - could something

Re: [Wireshark-dev] asn2wrs - BER and AUTOMATIC TAGS question

2007-11-21 Thread Martin Peylo
Od: [EMAIL PROTECTED] za uživatele Martin Peylo Odesláno: út 20.11.2007 19:16 Komu: Developer support list for Wireshark Předmět: [Wireshark-dev] asn2wrs - BER and AUTOMATIC TAGS question Hi, I have to create a dissector for a (not that well designed) proprietary ASN.1

[Wireshark-dev] asn2wrs - BER and AUTOMATIC TAGS question

2007-11-20 Thread Martin Peylo
Hi, I have to create a dissector for a (not that well designed) proprietary ASN.1 defined protocol. It uses BER for encoding. It is defined with AUTOMATIC TAGS which means that the components of all constructed types (e.g. SEQUENCEs) are automatically tagged as CONTEXT-SPECIFIC starting from 0

Re: [Wireshark-dev] no interface listed using wireshark, vista home premium 32

2007-11-14 Thread Martin Peylo
Hi, do you start Wireshark with the needed capture privileges? http://wiki.wireshark.org/CaptureSetup/CapturePrivileges Regards, Martin On Nov 14, 2007 5:20 PM, Yngve Edvardsen [EMAIL PROTECTED] wrote: Hi, Wireshark is not able to list any interfaces on my Dell XPS 1330m laptop. I

Re: [Wireshark-dev] How do I cross compile plugins from linux to windows

2007-10-16 Thread Martin Peylo
Hi Samy, I did this some time ago but have no easy access to the current build directory right now. I found the attached script on my hdd, maybe it is of use for you. I built Wireshark once on Windows (that was btw not as comfortable as I'm used to it on other OS) and extracted the

[Wireshark-dev] [PATCH] TIPC - added reassembling of fragmented messages and calling of heuristic subdissectors

2007-09-16 Thread Martin Peylo
Hi, attached is a patch which adds - reassembling of fragmented TIPCv2 messages - calling of heuristic subdissectors - multicast upper+lower bound header fields are now shown and corrects few typos in the comments in packet-tipc.c. I also changed my email address to a private one since I'm doing

Re: [Wireshark-dev] Problems building Webshark 0.99.6

2007-07-26 Thread Martin Peylo
Hi, you should have an rpm in your distribution if you're searching for Wireshark, not Webshark - provided that you're looking for a network protocol analyzer. Regards, Martin On 7/26/07, Bryant, Stephanie [EMAIL PROTECTED] wrote: Greetings, I am a newbie administrator and I am new to

Re: [Wireshark-dev] Problems building Wireshark 0.99.6

2007-07-26 Thread Martin Peylo
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Peylo Sent: Thursday, July 26, 2007 9:41 AM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Problems building Webshark 0.99.6 Hi, you should have an rpm in your distribution if you're searching

Re: [Wireshark-dev] Howto unregister a dissector?

2007-06-22 Thread Martin Peylo
Hi, I'm searching for a way to unregister a dissector. I don't think there is a way. See below. I was looking around in the code and I think it might be easy to unregister a dissector or rather replace one when registering another one with the same name. For sure consciously unregistering

Re: [Wireshark-dev] [PATCH] TIPC bundler messages and data dissection

2007-06-21 Thread Martin Peylo
Hi, I forgot: I uploaded a sample capture of the TIPC Bundler Protocol to http://wiki.wireshark.org/SampleCaptures?action=AttachFiledo=gettarget=tipc-bundler-messages.pcap Regards, Martin On 6/20/07, Martin Peylo [EMAIL PROTECTED] wrote: Hi, please apply the attached patch to packet-tipc.c

Re: [Wireshark-dev] wireshark-0.99.5 Segmentation fault on displaying packets

2007-06-21 Thread Martin Peylo
Hi, actually there should be the right rpath set in your executable. You can check that like this: bash$ readelf -a /local/scratch/usr/local/bin/wireshark |grep rpath 0x000f (RPATH) Library rpath: [/local/scratch/usr/local/lib] ... if it looks much different something

[Wireshark-dev] [PATCH] TIPC bundler messages and data dissection

2007-06-20 Thread Martin Peylo
Hi, please apply the attached patch to packet-tipc.c. Changes are only for protocol version 2. The changes are: - dissect TIPC Bundler Protocol messages correctly - search for other dissectors which want to dissect encapsulated data according to the TIPC user or TIPC type of a message. The

Re: [Wireshark-dev] Howto unregister a dissector?

2007-06-19 Thread Martin Peylo
Hi Stephen, On 6/13/07, Stephen Fisher [EMAIL PROTECTED] wrote: On Mon, Jun 11, 2007 at 01:31:21PM +0200, Martin Peylo wrote: I'm searching for a way to unregister a dissector. I don't think there is a way. See below. Thanks for the reply, this validates what I expected. My problem

[Wireshark-dev] Howto unregister a dissector?

2007-06-11 Thread Martin Peylo
Hi, I'm searching for a way to unregister a dissector. My problem is that we need a specially hacked version of a protocol dissector which is already built into Wireshark (lives in libwireshark.so). In order not to distribute a hacked version of Wireshark (for Linux, Solaris and Windows) to

[Wireshark-dev] proto_tree_add_? for adding a calculated value and bitfield

2006-11-23 Thread Martin Peylo
Hi, I'd like to fix a bug in the TIPC dissector. The header size is given in 4-byte units. So the actual size is (4*hdr_size). What function can I use for that if I also want to see the bitfield like when using proto_tree_add_item()? I don't find that when looking at the documentation. Thanks,

[Wireshark-dev] [patch] TIPC - show src/dst for Neighbour Discovery Packets

2006-11-13 Thread Martin Peylo
Hi, could anybody please apply that to epan/dissectors/packet-tipc.c and check it in? This patch changes the name of Link Configuration Packets to Neighbour Discovery - as preferred by the creator of TIPC - and shows the TIPC src/dst in the columns instead of the MAC address for those packages.

Re: [Wireshark-dev] creating a NBAP dissector with a different versionof the NBAP ASN.1 definition - asn2wrs questions

2006-11-13 Thread Martin Peylo
:[EMAIL PROTECTED] On Behalf Of Martin Peylo Sent: den 6 november 2006 14:03 To: Wireshark-dev@wireshark.org Subject: [Wireshark-dev] creating a NBAP dissector with a different versionof the NBAP ASN.1 definition - asn2wrs questions - what Version of the NBAP standard was used to create asn

[Wireshark-dev] creating a NBAP dissector with a different version of the NBAP ASN.1 definition - asn2wrs questions

2006-11-06 Thread Martin Peylo
Hi all, I don't have much knowledge about ASN.1 and NBAP so please excuse me if I ask a question where the answer is quite clear to someone who has ;-) I should be able to produce a packet-nbap.c which fits to a different (or better any) version of the NBAP stardard. The different versions of

Re: [Wireshark-dev] New dissector for Enea's LINX protocol

2006-10-09 Thread Martin Peylo
which are attached to the LINX site? Regards, Martin On 10/9/06, Anders Broman (AL/EAB) [EMAIL PROTECTED] wrote: Hi, Chose the one you like :) it can always be changed later. BR Anders -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Peylo

Re: [Wireshark-dev] New dissector for Enea's LINX protocol

2006-10-06 Thread Martin Peylo
in the Wiki? Oh, the sample capture goes onto SampleCaptures of course. Thanx, Jaap On Wed, 4 Oct 2006, Martin Peylo wrote: Hi, could anybody please check the attached dissector for Enea's LINX protocol? A protocol spec is available at http://www.enea.com/templates/Extension8947

[Wireshark-dev] New dissector for Enea's LINX protocol

2006-10-04 Thread Martin Peylo
Hi, could anybody please check the attached dissector for Enea's LINX protocol? A protocol spec is available at http://www.enea.com/templates/Extension8947.aspx. The source of the kernel module could be obtained from Enea by sending a request to linx at enea dot com. Currently they use

[Wireshark-dev] Patch: Improvements for TIPC dissector package-tipc.c

2006-09-28 Thread Martin Peylo
is more concise and gives more details - some code beautifications Could someone please review it and - if ok - commit it? If there are any issues left or raised please CC a mail to: martin dot peylo at siemens dot com Thanks, Martin Peylo patch_packet-tipc.c.gz Description: GNU Zip compressed

Re: [Wireshark-dev] Patch: Improvements for TIPC dissector package-tipc.c

2006-09-28 Thread Martin Peylo
. cleanup changes to patched HEAD second. 2. also cleanup the end of the initializers, the last element shall not have a trailing comma. Thanx, Jaap On Thu, 28 Sep 2006, Martin Peylo wrote: Hi, The attached patch (against wireshark 0.99.3a) mainly improves following aspects of the TIPC dissector