[Wireshark-dev] Add generated hf_register_info during proto_register_...

#x27;t find what I was looking for. Thanks for any help Cheers Michael Lum (michael@starsolutions.com<mailto:michael@starsolutions.com>) | STAR SOLUTIONS<http://www.starsolutions.com/> | Principal Software Engin

Re: [Wireshark-dev] Wireshark 3.4.8 build from source tarball fails generating build files

missed the part about Windows 7 not being supported past 3.2, I believe. I'm assuming #4 is because I am building on Windows 7. My only problem is now getting everything packaged with NSIS. I'll create a separate email for that. Thank you again for your timely assistance. M

[Wireshark-dev] Wireshark 3.4.8 build from source tarball fails generating build files

es cannot be regenerated correctly. C:\ws348-64> I saw there was an old issue related to these kind of errors but that was fixed. https://gitlab.com/wireshark/wireshark/-/issues/17477 Any help would be appreciated. Michael Lum (michael@starsolutions.com<mailto:michael@starsolut

[Wireshark-dev] IKEv2/ESP decryption preference inconsistency

eason.) Thanks for all your hard work. BR, Michael Michael Lum (michael@starsolutions.com<mailto:michael@starsolutions.com>) | STAR SOLUTIONS<http://www.starsolutions.com/> | Principal Software Engineer 4600 Jacombs Road, Richmond BC, Canada V6V 3B1

Re: [Wireshark-dev] Sometimes SLL/Linux cooked-mode capture is decoded and sometimes its not (difference between two packets?)

u would know it was because the datalink type was changing depending on what interface I was capturing and the encapsulation has to be formatted differently. I now have ethernet, Linux cooked capture, and NFLOG working. Thanks again! BR, Michael Lum From

[Wireshark-dev] Sometimes SLL/Linux cooked-mode capture is decoded and sometimes its not (difference between two packets?)

annot figure out why they are not both decoded as SLL/Linux cooked-mode captures. Any thoughts would be greatly appreciated. I'm running on Windows 7 using Wireshark 2.6.1. The capture was taken on a CentOs 7 box by a tool injecting the "fake" syslog message. BR, Michael M

Re: [Wireshark-dev] Is there a way to disable documentation generation?

been fixed again with the latest sources. On 1 August 2017 at 22:02, Michael Lum mailto:michael@starsolutions.com>> wrote: It works when I change: set WIRESHARK_CYGWIN_INSTALL_PATH=c:\cygwin64 to set WIRESHARK_CYGWIN_INSTALL_PATH=c:/cygwin64 This has changed since 2.2.5 or it has

Re: [Wireshark-dev] Is there a way to disable documentation generation?

-boun...@wireshark.org] On Behalf Of Michael Lum Sent: August-01-17 1:47 PM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Is there a way to disable documentation generation? This is from my 2.2.5 build with the same "message" calls added: -- CYGWIN_INSTALL_P

Re: [Wireshark-dev] Is there a way to disable documentation generation?

Behalf Of Michael Lum Sent: August-01-17 1:44 PM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Is there a way to disable documentation generation? I added some "message" output to the FindASCII script: -- CYGWIN_INSTALL_PATH=c:\cygwin64 -- l_a2x_ex=c:/cygwin64/bin

Re: [Wireshark-dev] Is there a way to disable documentation generation?

h or does it take care of \ /? From: Wireshark-dev [mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Michael Lum Sent: August-01-17 11:16 AM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Is there a way to disable documentation generation? Th

Re: [Wireshark-dev] Is there a way to disable documentation generation?

1-17 10:44 AM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Is there a way to disable documentation generation? On 1 August 2017 at 18:10, Michael Lum mailto:michael@starsolutions.com>> wrote: Hi Graham, thanks for the help. I wasn't sure if you wa

Re: [Wireshark-dev] Is there a way to disable documentation generation?

ker flags: -Wl,--as-needed statuscheck linker flag - test linker flags: -pie C:\ws240-64> I've attached the cmake.txt output file. Let me know if you need anything else. BR Michael Lum From: Wireshark-dev [mailto:wireshark-dev-boun...@wireshark.org] On B

[Wireshark-dev] Is there a way to disable documentation generation?

It's breaking in docbook eventhough I have the packages listed in the developer's guide: asciidoc 8.6.9-1 biber 2.5-1 build-docbook-catalog 1.5-2 dblatex 0.3.10-1 docbook-xml45 4.5-1 docbook-x

[Wireshark-dev] Build of Wireshark 2.4.0 source is failing with 4 errors related to docbook and doc

ration=RelWithDebInfo nsis_package.vcxproj exit /b ) IF [%1] == [prep] ( @echo cmake -DPYTHON_EXECUTABLE=c:\Python27\python -DENABLE_CHM_GUIDES=on -G "Visual Studio 12 2013 Win64" %myPath% cmake -DPYTHON_EXECUTABLE=c:\Python27\python -DENABLE_CHM_GUIDES=on -G &

[Wireshark-dev] Build of Wireshark 2.4.0 source is failing to find bash during prep step

/) isn't from Cygwin. Check your path Call Stack (most recent call first): CMakeLists.txt:942 (find_package) -- Configuring incomplete, errors occurred! See also "C:/ws240-64/CMakeFiles/CMakeOutput.log". See also "

Re: [Wireshark-dev] How is the protocol display filter name determined?

with the protocol filter. -Original Message- From: Michael Lum To: wireshark-dev Sent: Thu, Mar 24, 2016 6:27 pm Subject: [Wireshark-dev] How is the protocol display filter name determined? Hi, I have a custom plugin building with the Wireshark 2.0.2 source on Windows 7, using cmake

[Wireshark-dev] How is the protocol display filter name determined?

Hi, I have a custom plugin building with the Wireshark 2.0.2 source on Windows 7, using cmake. For the most part the plugin works correctly. Display filters on particular items appear to work. However, when I try to use just the protocol name to filter I don't get any packets. But if I clear

Re: [Wireshark-dev] Replacing g_iconv and different codesets

Yes! ;) Michael Lum (michael@starsolutions.com) | STAR SOLUTIONS | Principal Software Engineer 4600 Jacombs Road, Richmond BC, Canada V6V 3B1 | +1.604.303.2315 > -Original Message- > From: wireshark-dev-boun...@wireshark.org > [mailto:wireshark-dev-boun...@wireshar

Re: [Wireshark-dev] Replacing g_iconv and different codesets

#define ENC_ISO_8859_2 0x000E #define ENC_ISO_8859_5 0x0014 #define ENC_ISO_8859_9 0x001C I can't detect a pattern aside from not using the least significant bit. I was thrown off at the gaps between 0x000E and 0x0014 and 0x001C. Michae

[Wireshark-dev] Replacing g_iconv and different codesets

n the ANSI SMS dissector. iso-8859-8 (Latin/Hebrew) is pretty easy to add I believe I can follow the pattern for the code that is there now. The other is EUC-KR (Korean). I tried to find a code page that looks like the ISO ones but I'm not how these conversions are supposed to work. M

[Wireshark-dev] NSIS packaging for custom plugins

I don't know how the NSIS packaging works but when you want to add a custom plugin it looks like you need to modify both Custom.nmake and custom_plugins.txt Is this correct? If so would it be possible to just have Custom.nmake and generate the other file (if its required)? Michae

Re: [Wireshark-dev] Thoughts on disabling an old dissector

I asked around internally and as a customer of AudioCodes we still use that dissector. Michael Lum (michael@starsolutions.com) | STAR SOLUTIONS | Principal Software Engineer 4600 Jacombs Road, Richmond BC, Canada V6V 3B1 | +1.604.303.2315 > -Original Message- > From: wir

Re: [Wireshark-dev] Coding style and example dissector

y Christmas and Happy New Year Michael Lum (michael@starsolutions.com) | STAR SOLUTIONS | Principal Software Engineer 4600 Jacombs Road, Richmond BC, Canada V6V 3B1 | +1.604.303.2315 > -Original Message- > From: wireshark-dev-boun...@wireshark.org > [mailto:wireshark-dev-boun...

[Wireshark-dev] Coding style and example dissector

submitted are having arbitrary white space/style changes made. I completely understand changes, for bugs, API changes, and warnings missed because of cross-platform builds. But I don't understand the need to change FROM a consistent style to some other style. Michael Lum (mi

Re: [Wireshark-dev] How to replace proto_tree_add_text()

Yeah, I looked at the script last week and it didn't help me much. I wrote that dissector about 10 years ago, one of my first, but I'm not sure if it was different from a lot of the others at the time. Michael Lum (michael@starsolutions.com<mailto:michael@starsolutions

[Wireshark-dev] How to replace proto_tree_add_text()

_info ? Basically, I want to just label a bunch of bits or octets, no subtree, not filterable. Thanks for you help. Michael Lum (michael@starsolutions.com<mailto:michael@starsolutions.com>) | STAR SOLUTIONS<http://www.starsolutions.com/> | Principal Software Engineer

Re: [Wireshark-dev] Wireshark coding style help

Thanks Bill. I was concerned there was something I was missing. I understand its a lot of work to go through other peoples varying styles of code. Keep up the good work. Thanks again. -- Michael Lum (michael@starsolutions.com) | STAR SOLUTIONS | Principal Software Engineer 4600 Jacombs

[Wireshark-dev] Wireshark coding style help

Hi, its been a while since I've looked at the Wireshark source code and I'm trying to update one of the dissectors I added a long time ago. Can someone tell me why code like this: i++; would have been changed to this: i += 1; ? Thank you Michael Lum (michael@starsol

[Wireshark-dev] What severity should be shown for multiple expert infos in a packet ?

wn instead of WARN. For example in one packet I have: there was a UDP ERROR severity expert info for a bogus payload length there was also a WARN severity expert info for a protocol dissected in the UDP payload. The 'expert' column displayed WARN. It seems like a bug. Michael Lum

[Wireshark-dev] When is Wireshark 1.6 being released ?

2 and 1.4.3 have all been released since without this change. Why ? Should I be indicating some sort of higher priority or something in the Bugzilla report ? Thank you Michael Lum (michael@starsolutions.com<mailto:michael@starsolutions.com>) | STAR SOLUTIONS<http://www.sta

Re: [Wireshark-dev] VERSION_EXTRA change doesn't cause "About" dialogto change

Yes, removing gtk\about_dlg.obj and then rebuilding fixes the problem. Michael Lum (michael@starsolutions.com <mailto:michael@starsolutions.com> ) | STAR SOLUTIONS <http://www.starsolutions.com/> | Principal Software Engineer 4600 Jacombs Road, Richmond BC, Ca

[Wireshark-dev] VERSION_EXTRA change doesn't cause "About" dialog to change

would appear maybe the GUI files are not dependent on this? I don't really want to clean and rebuild everything. Does anybody know exactly which files I need to remove ? Thanks Michael Lum (michael@starsolutions.com <mailto:michael@starsolutions.com> ) | STAR SOLU

[Wireshark-dev] ANSI TCAP/ANSI MAP decode problem

<> Here is another capture file containing ANSI MTP3/ANSI TCAP/ANSI MAP that does not dissect the return result. I keep getting complaints from users that Wireshark does not decode as well as Ethereal. I think this is a ANSI TCAP problem but I can't tell how it is supposed to match invokes with

Re: [Wireshark-dev] ANSI TCAP/ANSI MAP dissection problem

o IDs or 4 octets each: Originating Transaction ID Responding Transaction ID So in frame #2 Otid = 0x000e Rtid = 0x0027 with the Rtid corresponding to the invoke transaction ID. Thanks Michael Lum (michael@starsolutions.com <mailto:michael@starsolutions.com&g

Re: [Wireshark-dev] ANSI TCAP/ANSI MAP dissection problem

Thanks Anders. I have submitted a spec reference and patch for frame #1 problems. Michael Lum (michael@starsolutions.com <mailto:michael@starsolutions.com> ) | STAR SOLUTIONS <http://www.starsolutions.com/> | Principal Software Engineer 4600 Jacombs Road, Richmond BC

Re: [Wireshark-dev] ANSI TCAP/ANSI MAP dissection problem

Crap, I forgot the attachment. Michael Lum (michael@starsolutions.com <mailto:michael@starsolutions.com> ) | STAR SOLUTIONS <http://www.starsolutions.com/> | Principal Software Engineer 4600 Jacombs Road, Richmond BC, Canada V6V 3B1 | +1.

[Wireshark-dev] ANSI TCAP/ANSI MAP dissection problem

et details window says "Unknown invokeData blob". Michael Lum (michael@starsolutions.com <mailto:michael@starsolutions.com> ) | STAR SOLUTIONS <http://www.starsolutions.com/> | Principal Software Engineer 4600 Jacombs Road, Richmond BC,

Re: [Wireshark-dev] Meaning of packet_info.p2p_dir ?

ction requests but some messages are bi-directional. For example, the ADDS Deliver message is used in both directions for carrying SMS, OTA (IS-683), etc. IS-683 doesn't have anything to indicate the direction. Anders Broman has added 'link_dir' to solve this. Thanks for the he

Re: [Wireshark-dev] Meaning of packet_info.p2p_dir ?

n setting in the SCCP code is doing what it was supposed to. (get_sccp_assoc()) Does anyone know or is there some other mechanism that will provide the information I need? Thank you -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond

[Wireshark-dev] Meaning of packet_info.p2p_dir ?

Hello, is there a fixed meaning of packet_info.p2p_dir for all protocols? What is that value supposed to mean? -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star Solutions

Re: [Wireshark-dev] 1.2.0 trunk doesn't build ?

That's fixed packet-memcache.c. Thanks -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star Solutions > -Original Message- > From: wireshark-dev-boun...@wireshark.org > [mailto:wire

[Wireshark-dev] 1.2.0 trunk doesn't build ?

E : fatal error U1077: 'C:\PROGRA~1\MICROS~3\VC98\BIN\NMAKE.EXE' : return co de '0x2' Stop. NMAKE : fatal error U1077: 'C:\PROGRA~1\MICROS~3\VC98\BIN\NMAKE.EXE' : return co de '0x2' Stop. -- Michael Lum Principal Software Engineer 4600

Re: [Wireshark-dev] Can some minor enhancements be moved to the 1.0 trunk ?

Okay, now I understand, thank you Jaap. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star Solutions > -Original Message- > From: wireshark-dev-boun...@wireshark.org > [mailto:wireshark

Re: [Wireshark-dev] Can some minor enhancements be moved to the 1.0 trunk ?

Hi Jaap, I understand all about development and time. I don't see the difference between what I have done and support for new capture file formats as per 1.0.4 or all of the 'Updated Protocol Support' changes listed in the release notes. Thanks -- Michael Lum

[Wireshark-dev] Can some minor enhancements be moved to the 1.0 trunk ?

ireshark.orgRESO > FIXE Brought up to date with version C of the specification Thanks -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star Solutions __

Re: [Wireshark-dev] SCCP Calling party Decoding

Works fine for me. ;) With the following settings: MTP3 preference set to * ANSI * not ITU. I think the point code is 3 octets in your case. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star

[Wireshark-dev] Which patches go in 1.0.x versus 1.1.x ?

Hi, how is it determined whether a patch will be in the next release, 1.0.7 now, or the future 1.1.x release ? There are patches I have submitted that are resolved but have not shown up in 1.0.5 or 1.0.6. Did I set one of the Bugzilla parameters incorrectly ? Thanks. -- Michael Lum

Re: [Wireshark-dev] Pcap traces for SMS packets

You should probably indicate if you want GSM/UMTS or CDMA SMS and what kind of TCAP/MAP stack. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star Solutions

[Wireshark-dev] Developer's Guide update required for Win32 ?

I updated my latest copy of source and found that my libraries were out of date. Running 'setup' required me to install cygwin lynx. So I think section '2.2.2 Install Cygwin' of the Developer's Guide should have: Web/lynx added. Thanks. -- Michael Lum

Re: [Wireshark-dev] VoIP call analysis

s > > On Tue, Nov 25, 2008 at 6:51 PM, Michael Lum > <[EMAIL PROTECTED]> wrote: > > For calls IOS 5 uses connection-oriented SCCP in the same manner as > > BSSAP. > > > The "call model" the voip-calls dialog uses is just too > simplistic for taki

Re: [Wireshark-dev] VoIP call analysis

ocols such as RANAP/IOS/BSSAP know the complete call state. I thought I would want the IOS dissector to use the SCCP associations for call analysis but it doesn't seem that anybody is doing that with the other dissectors. ? Thanks. -- Michael Lum Principal Software Eng

[Wireshark-dev] VoIP call analysis

eventhough IOS 5 is carried on it ? Thanks. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star Solutions ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org h

Re: [Wireshark-dev] How do I get RTP payload type from sub-dissector

Thanks Anders that works. For my information I was trying to see if there was a preferred way of getting dissection information from a 'encapsulating' layer. I'm almost done. The last thing I'm trying to do (I think) is figure out if I can add IOS5 to the VoIP calls analy

Re: [Wireshark-dev] How do I get RTP payload type from sub-dissector

_handle); but when a particular packet is being dissected I want to know if it is EVRC or EVRCB or EVRCWB so that I can use different header fields. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star

[Wireshark-dev] How do I get RTP payload type from sub-dissector

Hello, I have a dissector that gets called after RTP. How can I get the payload type for the packet from the RTP dissection in my dissector ? My dissector is called based on dynamic payload types. Thanks -- Michael Lum Principal Software Engineer 4600 Jacombs Road

Re: [Wireshark-dev] How do you get RTP recognized by Wireshark ?

Okay, I found my problem, duh, conversations weren't being found because I wasn't using 'tvb_get_ipv4()' everywhere and the addresses were not matching. Thank you -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richm

Re: [Wireshark-dev] How do you get RTP recognized by Wireshark ?

Yes to the 'Unknown' but no to the stream setup by SDP. I have modified the IOS 5 portion of packet-ansi_a.c. IOS 5 carries the mime type, IP address, port, etc. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C.

Re: [Wireshark-dev] How do you get RTP recognized by Wireshark ?

s returning NULL: p_conv_data = p_get_proto_data(pinfo->fd, proto_rtp); ? -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PR

Re: [Wireshark-dev] RTP Stream Analyses and dynamic payload clock rates

Done, Bug 3067. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jaap Keuter Sent: November 16, 2008 9

Re: [Wireshark-dev] How do you get RTP recognized by Wireshark ?

hanks. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Abhik Sarkar Sent: November 15, 2008 1:53

[Wireshark-dev] How do you get RTP recognized by Wireshark ?

IP address, port, payload, etc. but it doesn't appear to work. Any help would be great. Thanks. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 Star Solu

[Wireshark-dev] RTP Stream Analyses and dynamic payload clock rates

x27; and the returned clock rate of 8000 will be incorrect. Wouldn't my example be the equivalent to strncasecmp("AMR", "AMR-WB", 3) ? Thanks. -- Michael Lum Principal Software Engineer 4600 Ja

[Wireshark-dev] Create a new tvb from a bit offset in the current tvb

ample: create subset of 50 octets from the 20th octet and 5th bit of my current tvb Thanks in advance! -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Div

Re: [Wireshark-dev] 0.99.6 build problems on Windows

Hi Anders, I performed the following: nmake -f Makefile.nmake clean nmake -f Makefile.nmake distclean nmake -f Makefile.nmake clean_setup nmake -f Makefile.nmake setup nmake -f Makefile.nmake all but with the same result as before. ;( No luck. -- Michael Lum Principal

Re: [Wireshark-dev] 0.99.6 build problems on Windows

y incorrect but has been this way forever. Any ideas what libraries/environment I have would cause a different conditional compile compared to everybody else? Thanks -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3

Re: [Wireshark-dev] 0.99.6 build problems on Windows

with VC 6.0 is the February 2003 Edition, you can order a CD on the fulfillment site. Side by side installations are not supported. So unfortunately I'm still stuck. I have tried, clean, distclean, setup, all, again but to no avail. Thanks. -- Michael Lum Principal Softwar

Re: [Wireshark-dev] 0.99.6 build problems on Windows

n executed. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pas

Re: [Wireshark-dev] 0.99.6 build problems on Windows

\INCLUDE;C:\PROGRA~ 1\MICROS~3\VC98\INCLUDE;C:\PRO GRA~1\MICROS~3\VC98\MFC\INCLUDE; Has the way you setup your environment changed since 0.99.4? Everything builds with 0.99.4. Thanks -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond

Re: [Wireshark-dev] 0.99.6 build problems on Windows

\bin;C:\Program Files\Subversion\bin I have both python23 and python24 installed. config.nmake is set to python24. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division

Re: [Wireshark-dev] 0.99.6 build problems on Windows

Sorry, yes I was running nmake (oops). I have cygwin installed and it is configured with the correct path in config.nmake. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division

[Wireshark-dev] 0.99.6 build problems on Windows

follow.c I used the following steps: 1. get source from SVN 2. make -f Makefile.nmake distclean 3. make -f Makefile.nmake setup 4. make -f Makefile.nmake all I've built many versions of the Ethereal and Wireshark before and I can build 0.99.4 (using a different library directory). I have

[Wireshark-dev] IS-801 enhancement patch

This patch implements parameter dissection for about 1/2 to 2/3 of the messages in IS-801. Built and tested against the latest source as of Friday April 13th 2007. Build environment was: Windows XP Pro Microsoft Visual Studio 6.0 Thanks -- Michael Lum Principal Software

Re: [Wireshark-dev] BCD ?

It's probably even worse than that! In both GSM and CDMA protocols packed BCD can be represented as: digit2 digit1 digit4 digit3 such that two octets: 0x01 0x23 would be: 1032 An example is the Called Party BCD Number element. -- Michael Lum Principal Software Eng

Re: [Wireshark-dev] Saving settings as "Profiles"

"Apply" as in function as a display filter. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division > -Original Message- > From: [EMAIL PROTECTED]

Re: [Wireshark-dev] Saving settings as "Profiles"

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris > Sent: February 15, 2007 5:52 PM > To: Developer support list for Wireshark > Subject: Re: [Wireshark-dev] Saving settings as "Profiles" > > > On

Re: [Wireshark-dev] Saving settings as "Profiles"

sccp or sip or alcap or ansi_abis or a11 or tccs or snmp) I believe the capture file is loaded a second time after the filter is applied? Thanks. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Ca

Re: [Wireshark-dev] [Wireshark-commits] rev20334:/trunk//trunk/asn1/ansi_map/:ansi_map.asnansi_map.cnfpacket-ansi_map-template.c/trunk/epan/dissectors/:packet-ansi_map.cpacket-ansi_map.h

error. What was the motivation behind changing this dissector to ASN.1 ? -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division -Original Message- From: [EMAIL PROTECTED] [mai

Re: [Wireshark-dev] wslua won't build in 0.99.4

egistered patch, see perl -V for more detail) Copyright 1987-2001, Larry Wall Thanks -- Michael Lum Principal Software Engineer 4600 Jacombs Road+1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division -Original Message- From: [

Re: [Wireshark-dev] wslua won't build in 0.99.4

at line 10: "typedef\\s+enum[^{]*{([^}]*)}[\\s\\n]*${ename}[\\s\\n]*;"; I have attached the revision of the make-taps.pl I have. # $Id: make-taps.pl 19579 2006-10-17 18:20:44Z lego $ -- Michael Lum Principal Software Engineer 4600 Jacombs Road+1.604.276

[Wireshark-dev] wslua won't build in 0.99.4

077: 'C:\PROGRA~1\MICROS~3\VC98\BIN\NMAKE.EXE' : return code '0x2' Stop. Thanks. -- Michael Lum Principal Software Engineer 4600 Jacombs Road+1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division _

Re: [Wireshark-dev] How can a TAP refer to external data ?

That was the problem! Thanks very much Anders. -- Michael Lum Principal Software Engineer 4600 Jacombs Road+1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

[Wireshark-dev] How can a TAP refer to external data ?

PORT const value_string ansi_a_ios401_bsmap_strings[]; WS_VAR_IMPORT const value_string ansi_a_ios501_bsmap_strings[]; The pointer 'ansi_a_bsmap_strings' will be set to one of the above depending on the current IOS version. Thanks for your help. Build environment: Windows XP Visual C++ -- Michael Lum

[Wireshark-dev] Unresolved external symbol linking stats TAP

to one of the above depending on the current IOS version. Thanks for your help. Build environment: Windows XP Visual C++ -- Michael Lum Principal Software Engineer 4600 Jacombs Road+1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStar

Re: [Wireshark-dev] FW: ANSI MAP / TCAP dissector hooks

x27;t know the history behind the removal of the preference. -- Michael Lum Principal Software Engineer 4600 Jacombs Road+1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [Wireshark-dev] FW: ANSI MAP / TCAP dissector hooks

There may be a couple of problems here. The capture file contains ANSI MAP not GSM MAP. -- Michael Lum Principal Software Engineer 4600 Jacombs Road+1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division -Original Message

[Wireshark-dev] FW: ANSI MAP / TCAP dissector hooks

-- Michael Lum Principal Software Engineer 4600 Jacombs Road+1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division -Original Message- From: Michael Lum [mailto:[EMAIL PROTECTED] Sent: August 9, 2006 12:18 PM To: 'wire

[Wireshark-dev] Patch submitted waiting for moderator review

I have two older emails that I submitted before joining the mailing list that are awaiting moderator approval. One was a small patch. Is anyone checking for those emails? -- Michael Lum Principal Software Engineer 4600 Jacombs Road+1.604.276.0055 Richmond, B.C

[Wireshark-dev] ANSI MAP / TCAP dissector hooks

ing Request UDT ResponseRetRes(Last) UDT ResponseRetRes(Last) Following the same procedure with Wireshark 0.99.2 the decode goes as far as TCAP but not ANSI MAP. To get the decode to work properly I have to: 5. Edit preferences, change ANSI MAP SSN Range to something different, apply -- Michael

[Wireshark-dev] Unresolved symbol problem with a tap (__imp__a_global_variant)

fatal error U1077: 'link' : return code '0x460' Stop. Any help would be greatly appreciated. Thank you. (PS. If you need any more info let me know.) -- Michael Lum Principal Software Engineer 4600 Jacomb