[Wireshark-dev] MIB missing from net-snmp-5.4.zip

2007-02-01 Thread Jaap Keuter
Hi list, When opening the debug window for Wireshark 0.99.5pre3-20635 it spews out a missing MIB warning: No log handling enabled - turning on stderr logging Cannot find module (IPV6-FLOW-LABEL-MIB): At line 15 in C:\Program Files\Wiresha rk\snmp\mibs/TUNNEL-MIB.txt Did not find 'IPv6FlowLabelOrA

Re: [Wireshark-dev] blank makefile generated for custom dissector plugin

2007-02-01 Thread Jaap Keuter
Hi, Quote: -- The first thing is that you'll have to run autogen.sh and configure once more to setup your build environment. - Thanx, Jaap On Thu, 1 Feb 2007, David Bunch wrote: > Hello, I'm trying to create a protocol dissector for a custom protocol we > are developing. I foll

Re: [Wireshark-dev] linker error trying to build wireshark with basic dissector code from Dev-guide

2007-02-03 Thread Jaap Keuter
Hi, Your milage may improve when you read doc/README.plugin. That contains the latest stuff about plugin development. Thanx, Jaap On Fri, 2 Feb 2007, David Bunch wrote: > Hi all, I'm trying to build the basic dissector plugin template as found in > the developers guide. It compiles fine, howe

[Wireshark-dev] (no subject)

2007-02-03 Thread Jaap Keuter
Hi list, Going over the tarball on Win32 I've found some cruft in config.nmake. Hopefully someone with insight can set these straight. # Support for GTK 2.10 is currently experimental ... GTK2_INST_VERSION=2.10 PANGO_INST_VERSION=1.14 Is it experimental? WINPCAP_VERSION=3.1 # XXX - what to se

Re: [Wireshark-dev] [PATCH] fix NFSv4 stateid parsing

2007-02-03 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Fri, 2 Feb 2007, J. Bruce Fields wrote: > Fix an obvious error in the nfs4 stateid parsing. The stateid is used > in a number of common operations (such as open and setattr), so this caused > a lot of misparsing. > > Signed-off-by: "J. Bruce Fields" <[EMAIL PROT

Re: [Wireshark-dev] protocol decoding module

2007-02-05 Thread Jaap Keuter
Hi, Maybe Packetizer (see www.packetizer.com) can be used as an example. Thanx, Jaap On Mon, 5 Feb 2007, [ks_c_5601-1987] ?? wrote: > Dear wireshark-dev. Can you help me? > > I'm going to develop a program that is doing some thing with the captured > packets. Now I need a module to decode

Re: [Wireshark-dev] Tethereal extraction from Ethereal package

2007-02-05 Thread Jaap Keuter
Hi, Use this option when running configure: --enable-ethereal=no (at least I think that is in the Ethereal source, since we've moved to Wireshark a while ago) Thanx, Jaap On Mon, 5 Feb 2007, Pranav Shukla wrote: > Sir, > I have downloaded Ethereal-0.99 source code and > installed on my PC. Now

Re: [Wireshark-dev] basic dissector plugin compile error

2007-02-05 Thread Jaap Keuter
Hi, Loose the registration functions in your dissector. These get generated by the makefile. See the latest doc/README.plugin. Thanx, Jaap On Mon, 5 Feb 2007, David Bunch wrote: > Hey, > I did read the latest README.plugin > Thats how I got this far. I don't know what I am missing. The linke

[Wireshark-dev] Building with cygwin python

2007-02-07 Thread Jaap Keuter
Hi list, I was working on the Windows build (VC6) and had the usual trouble with python. Until I changed the PYTHON symbol to simply PYTHON=env. Bash seems to get enough info from the shebang in the script to run python for plugin.c generation. So should we put that in config.nmake? Thanx, Jaap

Re: [Wireshark-dev] Building with cygwin python

2007-02-07 Thread Jaap Keuter
Hi, On Thu, 8 Feb 2007, Ulf Lamping wrote: > Jaap Keuter wrote: > > Hi list, > > > > I was working on the Windows build (VC6) and had the usual trouble with > > python. Until I changed the PYTHON symbol to simply PYTHON=env. Bash > > seems to get enough info from

Re: [Wireshark-dev] saving "User Specified Decodes"

2007-02-14 Thread Jaap Keuter
Hi, Another way to help yourself, in case this is your own protocol dissector, is to make the dissector heuristic. Then you never have to setup the "decode as" at all! Thanx, Jaap On Wed, 14 Feb 2007, Andy Howell wrote: > Hello, > > I just asked on the user list if there any way to save t

[Wireshark-dev] Build problem (was Re: Patch for bug 310)

2007-02-19 Thread Jaap Keuter
Hi, 1. Please start a new thread when discussing a new subject 2. What is your idea about using cygwin libs? You're advice to use provided libs. 3. Have you followed the developer manual? I've done so just a month ago, building just fine. So have others. Thanx, Jaap _

Re: [Wireshark-dev] Minor bug fix to RSVP dissector

2007-02-23 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Fri, 23 Feb 2007, Morro Roberto wrote: > Dear Wireshark developers, > Please find attached a patch to the RSVP dissector that fixes a small > inaccuracy when printing the SENDER TSPEC object. > Substantially, it changes the string > "C-type: 1 - Integrated Service

Re: [Wireshark-dev] What do you use to get a boolean

2007-02-26 Thread Jaap Keuter
Hi, Reading from README.developer it states: For proto_tree_add_boolean(), the 'value' argument is a 32-bit integer; zero means "false", and non-zero means "true". That is misleading. You have to take into account the field info to determine the interpretation of this value (see epan/proto.c : p

[Wireshark-dev] Importing initializers in plugins on Win32

2007-02-28 Thread Jaap Keuter
Hi list, I've been trying to import some of the true_false strings provided by libwireshark.dll into a plugin, but can't get the compiler to grock it. Here's the relevant code snippet from my source file. #include #include static hf_register_info hf[] = { { &hf_lap_p,

Re: [Wireshark-dev] [PATCH] README.developer corrections

2007-03-05 Thread Jaap Keuter
Hi, I've re-read the previous discussion, it seems that this has been carefully studied. So I checked in the patch. Thanx, Jaap On Mon, 5 Mar 2007, Richard van der Hoff wrote: > Richard van der Hoff wrote: > > I posted this a few weeks ago, but I guess it got overlooked. It's some > > updates t

Re: [Wireshark-dev] [patch] SDP key-mgmt + MIKEY dissectors

2007-03-05 Thread Jaap Keuter
Hi, Thank you for doing this work. Puts Wireshark at the bleeding edge :) One request though: could you make this into a normal dissector, not a plugin? It already depends on changes in the build-in SDP dissector, so it should be added as a build-in as well. Thanx, Jaap On Mon, 5 Mar 2007, Mikae

Re: [Wireshark-dev] Dissect a packet base header bits

2007-03-06 Thread Jaap Keuter
Hi, You'll have to provide a little more detail than this. What size are header, message and data? Are they packed in a byte? format stuff like that. Thanx, Jaap On Tue, 6 Mar 2007, Steven Le wrote: > I have to dissect this payload. > > Header | message | data > > After getting the first 3 bi

Re: [Wireshark-dev] Dissect a packet base header bits

2007-03-06 Thread Jaap Keuter
n the first 3 bits of header (bit Type > field) > - > Header|Message if first 3 bits (type) is 000 > Header|Binary Data 001 > Header|Message|Binary Data 111 > ----

Re: [Wireshark-dev] Query on status of patches

2007-03-08 Thread Jaap Keuter
Hi, I can see your frustration. You like to be appreciated for the work done on creating a feature/patch you want to share with the world. That is what OSS is all about. On the other hand the "project owner' has to walk a fine line, getting enough committers in, who don't get compensation, while a

Re: [Wireshark-dev] private development and syncing process ...

2007-03-09 Thread Jaap Keuter
Hi, Indeed these are the steps to take. Don't distribute outside your company without providing the sources. Thanx, Jaap On Fri, 9 Mar 2007, Ravi Kondamuru wrote: > Hi, > > I am looking for a model on how wireshark dissector/wiretap addons are > developed exclusively for use within a company. I

Re: [Wireshark-dev] Wireshark APIs for display

2007-03-09 Thread Jaap Keuter
Hi, I've seen it been done. It was based on a message decoder that passed back a data structure of the message. Then there was a whole bunch of wireshark code to display all the structure members. Varying messages had varying structures so it ended up being a whole lot of proto_tree_add_*_format()

Re: [Wireshark-dev] I would to make a dissector for ms binl protocol

2007-03-19 Thread Jaap Keuter
Hi, Webpage looks good. You can find all you need to know for setting up a development environment in the developer guide on the website documentation section. The source tree contains a doc directory with README files. README.developer is what you want to read. Thanx, Jaap On Mon, 19 Mar 2007,

Re: [Wireshark-dev] AMQP dissector - alpha version

2007-03-21 Thread Jaap Keuter
Hi, Send it to list (if not too big) or open a bugzilla item for it. We'll have a look. If it doesn't break stuff, it should be fine. Have a look in the developer guide and Wiki about submitting patches. Thanx, Jaap On Wed, 21 Mar 2007, Martin Sustrik wrote: > Hi all, > > I've written dissector

Re: [Wireshark-dev] [Wireshark-users] Support for Microsoft LLTD Protocol

2007-03-21 Thread Jaap Keuter
Hi, I've added the Ethernet type (88D9) for it. Someone looking for a project can goto http://www.microsoft.com/whdc/Rally/LLTD-spec.mspx for the spec. A sample capture would be nice as well. Thanx, Jaap On Tue, 20 Mar 2007, Stephen Fisher wrote: > On Tue, Mar 20, 2007 at 06:08:23PM +0530, Mani

Re: [Wireshark-dev] AMQP dissector - alpha version

2007-03-21 Thread Jaap Keuter
Hi, I don't understand. Do you want to share the object/DLL, or the complete WS source code, or create a patch? Or are you worried about distribution in the GPL sense? Thanx, Jaap On Thu, 22 Mar 2007, Martin Sustrik wrote: > Hi, > > The question I've actually wanted to ask was: "Is there a way

Re: [Wireshark-dev] BCD ?

2007-04-07 Thread Jaap Keuter
Hi, I've been interested in BCD presentation as well. For that I've whipped together some proto_tree_add_bcd() code, but couldn't really get my head around creating a generic FT_BCD. For that matter you're talking about PACKED BCD, which is different from BCD. PACKED BCD: 0x46 0x10 -> 4610 BC

[Wireshark-dev] Lifehacker DoD

2007-04-23 Thread Jaap Keuter
Uh oh, We've become "download of the day" at Lifehacker: http://lifehacker.com/software/networking/download-of-the-day-wireshark-all-platforms-254218.php Thanx, Jaap ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/m

[Wireshark-dev] Broken build on GCC 4.1.2

2007-04-25 Thread Jaap Keuter
Hi, Revision 21563 breaks my build on several places, using GCC 4.1.2 on Debian lenny/sid. I already hacked packet-ipsec.c, but next up is packet-bpdu.c, reporting: cc1: warnings being treated as errors packet-bpdu.c: In function 'dissect_bpdu': packet-bpdu.c:252: warning: pointer of type 'void *

Re: [Wireshark-dev] New disesector for Juniper NSRP

2007-04-26 Thread Jaap Keuter
Hi, Nice clean patch. Committed in revision 21599. Thanx, Jaap On Fri, 27 Apr 2007, Secfire wrote: > Hi Dev, > > Attachment is a patch for adding a new Juniper NSRP dissector. In this > patch, OICQ author email address <[EMAIL PROTECTED]> has also been > updated to < [EMAIL PROTECTED]>. Later

Re: [Wireshark-dev] Patch Netflow v9 to decode Netflow options, and other fixes

2007-04-27 Thread Jaap Keuter
Hi, Patch looks good, not too sure about the to_hexadecimal though. Thanx, Jaap On Fri, 27 Apr 2007, Olivier MONTANUY wrote: > Hello, > > I opened a a bug report #1579 to signal that epan/dissectors/packet-netflow.c > currently cannot decode Netflow options, because it does not take into > acc

Re: [Wireshark-dev] [PATCH] ppp_hdlc in sll

2007-05-02 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Wed, 2 May 2007, Matt Addison wrote: > Problem: > The existing sll dissector does not handle ppp_hdlc packets (sll.ltype > == 0x0007). > > Resolution: > Alter packet-sll.c to call the ppp_hdlc dissector when a packet with > sll.ltype=0x0007 is received. > > Why: >

[Wireshark-dev] Build is breaking several places

2007-05-03 Thread Jaap Keuter
Hi people, The build is breaking in several places, so lets get it green again. One problem is with the h245 changes by Anders. A missing type in the template. Another is with winreg.c. My own build breaks at a missing rule to make asn1.lo. Thanx, Jaap ___

Re: [Wireshark-dev] How to get plugin version from myPlugin.dll ?

2007-05-09 Thread Jaap Keuter
Hi, I've incorporated the Win32 resources starting from the 0.99.5 release, so that's why your code probably doesn't have these resources. One thing you can do is use the strings utility, which tries to display everything that looks like a string in an executable file. sysinternals' process explor

Re: [Wireshark-dev] distclean and build errors

2007-05-11 Thread Jaap Keuter
Hi, I ended up hacking the wget config file, setting the proxy stuff there. Thanx, Jaap On Fri, 11 May 2007, Stephen Fisher wrote: > On Thu, May 10, 2007 at 04:28:02PM -0600, Tyler De Haven Brown wrote: > > > P.S.-I had to download the files manually, because even when setting > > the http_prox

[Wireshark-dev] GTK 2.10.12

2007-05-12 Thread Jaap Keuter
Hi list, From http://mail.gnome.org/archives/gnome-announce-list/2007-May/msg5.html - GTK+ 2.10.12 released * From: Matthias Clasen * To: gnome-announce-list gnome org, gtk-devel-list gnome org, gtk-app-devel-list gnome

[Wireshark-dev] OpCua faulty checkin and breaks the build

2007-05-14 Thread Jaap Keuter
Hi, Multiple things are wrong with the recently added OpCua plugin: - There are no properties on the directory or the files, - The headers are missing from the Makefile.common, breaking the dist, - Not all DISSECTOR_SRC are dissector main entry point. The rest should be in the DISSECTOR_SUPPORT_S

Re: [Wireshark-dev] [PATCH] Improved support for MIPv4

2007-05-16 Thread Jaap Keuter
Hi, Some additional notes: + {REGISTRATION_REVOCATION, "Registration Revocation"}, + {REGISTRATION_REVOCATION, "Registration Revocation Acknowledgement"}, The second one misses _ACKNOWLEDGEMENT in the symbol {0, NULL}, }; Don't put a comma after the last initializer. It's just poor style

Re: [Wireshark-dev] OpCua faulty checkin and breaks the build

2007-05-16 Thread Jaap Keuter
Hi, The opcua plugin came a long way. :)) Two more questions though. Do we need to include gmodule.h everywhere? I think including glib.h is what's needed. Do we need to link against dissectors.lib ? (LINK_PLUGIN_WITH=..\..\epan\libwireshark.lib ..\..\epan\dissectors\dissectors.lib) I can't fi

[Wireshark-dev] Please test fix Critical bug 1360

2007-05-16 Thread Jaap Keuter
Hi list, Can someone test the current Windows build against the capture in bug 1360? It's a critical bug we need to get closed, like the other 13 criticals. Since we've almost 200 bugs open, 14 critical, we need to get cracking at them before we're going to see a release anytime soon. Thanx, Jaa

[Wireshark-dev] PAD file and automatic version checking

2007-05-16 Thread Jaap Keuter
Hi Gerald, On the Wireshark download page a PAD file can be found that can be used for version checking. Version checking is an item on the release list for .6 (Win32). What I can't figure out is how the update is being checked on the client PC? How/by what software is the PAD file being checked a

[Wireshark-dev] bugfix for 1550

2007-05-22 Thread Jaap Keuter
Hi list, Can our TCP dissection experts have a look at the proposal in bug 1550? http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1550 Seems like a valuable improvement, but I can't judge all implications. Thanx, Jaap ___ Wireshark-dev mailing list W

Re: [Wireshark-dev] Packet Playback with Wireshark

2007-05-23 Thread Jaap Keuter
Hi, No. See http://wiki.wireshark.org/Tools Thanx, Jaap On Wed, 23 May 2007, James McLellan wrote: > Hi, > > Is there a capability in Wireshark (or a plugin) to > allow playback of captured packets? > > ___ Wireshark-dev mailing list Wireshark-dev@w

Re: [Wireshark-dev] patch for new encapsulation protocol FCoE - Fibre Channel over Ethernet

2007-05-23 Thread Jaap Keuter
Hi, The code looks oke, one question though. Why is the ethertype in a preference? Are there non-IEEE-ethertype-standard implementations in the wild, or is this a development left over? If so, better get it out. A sample capture would be usefull for fuzztesting, so yes please. Thanx, Jaap On Wed

Re: [Wireshark-dev] proposed change for packet-ssl-utils.h

2007-05-24 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Thu, 24 May 2007, Brian Vandenberg wrote: > I ran into a problem trying to debug some of my stuff yesterday that > depends on the http dissector, and the server I'm working with defaults > to ssl traffic; whenever I try to debug it, it always gets hung up on > t

Re: [Wireshark-dev] Dissectors

2007-05-25 Thread Jaap Keuter
Hi, For one the eth_handle is most likely a module global variable, so used elsewhere. Could you name the dissector you saw this in? The other thing to notice is that it is not very smart to quote your registration info, including password, in a public mailing list. Better change is REAL SOON

Re: [Wireshark-dev] problem building wireshark

2007-06-11 Thread Jaap Keuter
Hi, Sure, give us some info on the environment you're building in. Compiler, tarball or SVN checkout, OS, stuff like that. Thanx, Jaap On Mon, 11 Jun 2007, Tyler De Haven Brown wrote: > I'm new to wireshark and having problems with the first build > Get the following error message box: > tshark

Re: [Wireshark-dev] Unistim plugin

2007-06-11 Thread Jaap Keuter
Hi, Please have a look at the current h223 plugin source tree to see how the various Makefile and other support files are setup to make sure all meta data and source distribution is in order. Thanx, Jaap On Mon, 11 Jun 2007, Newton, Don wrote: > It has been tested on both Linux and Windows XP.

Re: [Wireshark-dev] unresolved external symbol _tvb_get_ephemeral_faked_unicode

2007-06-12 Thread Jaap Keuter
ed, > >> Tyler > >> > >> > >> Original message > >> > >>> Date: Tue, 12 Jun 2007 09:01:00 -0600 (MDT) > >>> From: Tyler De Haven Brown <[EMAIL PROTECTED]> > >>> Subject: Re: [Wireshark-dev] problem building

Re: [Wireshark-dev] Patches to update PANA Protocol dissector

2007-06-13 Thread Jaap Keuter
Hi, Could you recreate the patch against the current tree? Your revision 21417 is too old and doesn't apply. Thanx, Jaap Victor Fajardo wrote: > To wireshark-maintainers, > > Attached is a patch file for the PANA protocol dissector. The changes > updates the packet-pana.c dissector to support

Re: [Wireshark-dev] Patches to update PANA Protocol dissector

2007-06-14 Thread Jaap Keuter
Hi, Committed in revision 22098. Thanx, Jaap Victor Fajardo wrote: > Hi, > > Attached is a patch based on rev 22093. > > regards, > victor > >> Hi, >> >> Could you recreate the patch against the current tree? Your revision >> 21417 is too old and doesn't apply. >> >> Thanx, >> Jaap >> >> Vic

Re: [Wireshark-dev] edonkey

2007-06-18 Thread Jaap Keuter
Hi, Committed in revision 22128 after a few changes: - replaced C++ with C comments - replaced "%llu" format string by "%" G_GINT64_MODIFIER "u" Thanx, Jaap Łukasz M. wrote: > Hi. > > I'm new here, so hello everyone. :) > > I added 5 new packets to packet-edonkey.c and improve 2. Diffs in > at

Re: [Wireshark-dev] X.25, LAPB, PLP Decoding

2007-06-18 Thread Jaap Keuter
Hi Mirko, Please refer to http://wiki.wireshark.org/Development/LibpcapFileFormat about this subject. Thanx, Jaap [EMAIL PROTECTED] wrote: > Hi, > > I’ve been making Protocol Analyzer based on Sangoma S5142A synch serial > card and WireShark. Capturing of X.25 LAPB and PLP layers is done by

Re: [Wireshark-dev] wireshark-0.99.5 Segmentation fault on displaying packets

2007-06-18 Thread Jaap Keuter
Hi, Can you run Wireshark in DDD so you can get a backtrace? See http://wiki.wireshark.org/Development/Tips Thanx, Jaap yin sun wrote: > Hello, > > I have compiled wireshark from 0.99.5 source on Suse10 Linux > 2.6.16.27-0.9-smp x86. Initial launch is ok, change/save preference is > ok, but f

Re: [Wireshark-dev] [Patch] Unistim dissector plugin

2007-06-19 Thread Jaap Keuter
Hi, The plugin looks good, now we need some sample captures for a testdrive (fuzztest). Can you whip up a Wiki protocol page and add the sample captures? Thanx, Jaap Newton, Don wrote: > I have corrected all deficits that were noted. I also have changed so > rudp sequence id shows in info co

Re: [Wireshark-dev] od for Windows?

2007-06-20 Thread Jaap Keuter
Google is your best friend. http://www.kmrconsulting.com/free_download.html Thanx, Jaap Martin Mathieson wrote: > Thanks Luis, > > I want to avoid turning the laptop I was using yesterday into another > dev machine :) > > Martin > > > On 6/19/07, Luis EG Ontanon <[EMAIL PROTECTED]> wrote: >>

Re: [Wireshark-dev] edonkey

2007-06-20 Thread Jaap Keuter
HI, Committed in revision 22143. Thanx, Jaap Lukasz M. wrote: > hi, > > Another patch for packet-edonkey.c. It's very small, but very useful. > Sometimes edonkey packets comes joined, and wireshark display only last > one on column Info. Now everyone is displayed. > __

Re: [Wireshark-dev] [Patch] Unistim dissector plugin [Sample captures attached]

2007-06-20 Thread Jaap Keuter
riginal Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Jaap Keuter > Sent: Tuesday, June 19, 2007 5:01 PM > To: Developer support list for Wireshark > Subject: Re: [Wireshark-dev] [Patch] Unistim dissector plugin > > Hi, > > The plugin looks go

Re: [Wireshark-dev] [Patch] Unistim dissector plugin [Sample captures attached]

2007-06-20 Thread Jaap Keuter
or tomorrow. > > Don Newton > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Jaap Keuter > Sent: Tuesday, June 19, 2007 5:01 PM > To: Developer support list for Wireshark > Subject: Re: [Wireshark-dev] [Patch] Unistim diss

Re: [Wireshark-dev] [Patch] Unistim dissector plugin [Sample captures attached]

2007-06-20 Thread Jaap Keuter
o play around with with fuzztest. Thanx, Jaap Newton, Don wrote: > Gotcha, here you go. > > Don Newton > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Jaap Keuter > Sent: Wednesday, June 20, 2007 1:36 PM > To: Develo

Re: [Wireshark-dev] Which install files have changed based on source modifications

2007-06-25 Thread Jaap Keuter
Hi, This sounds all overly complicated. You could deduce which executable/DLL is affected by you changes by unraveling the build process, but it's much easier to build you own full installer. Thanx, Jaap Greg Bell wrote: > Hello, > > I'd like to make some modifications to Wireshark and packa

Re: [Wireshark-dev] Which install files have changed based on source modifications

2007-06-26 Thread Jaap Keuter
ms) as a completely different and > independent app. I'm assuming the VERSION_EXTRA thing is not enough. > > Any help is appreciated, thanks. > > > */Jaap Keuter <[EMAIL PROTECTED]>/* wrote: > > Hi, > > This sounds all overly complicated.

Re: [Wireshark-dev] referring to a previous packet

2007-06-27 Thread Jaap Keuter
Hi, This problem can be addressed by means of conversations. See the README.developer on the concept and all relevant details how to use it. Thanx, Jaap On Wed, 27 Jun 2007, Manuel Jung wrote: > Hello, > > I have to build a dissector for a non-public protocol. > > The protocol I have to dissect

Re: [Wireshark-dev] Proper use of proto_tree_add_string?

2007-06-29 Thread Jaap Keuter
How about: proto_tree_add_debug_text() ? Thanx, Jaap kannoll wrote: > > > I am running into some error conditions in decoding WLCCP and would like to > catch the error and print a nice message in the protocol tree at the point > the error occurs and stop decoding at that point. > > I have t

Re: [Wireshark-dev] Beginner article for custom dissector now on Code Project

2007-07-01 Thread Jaap Keuter
Hi Ken, Did a quick review of your article. These are the point you could improve. 8<--- 7.0 Your Dissector Code You can use a text editor of your choice to open the packet-yourprotocol.c. Let's take it line by line: #ifdef HAVE_CONFIG_H # include "config.h" #endif #include

[Wireshark-dev] Debian package files for 0.99.6

2007-07-01 Thread Jaap Keuter
Hi Frederic, I noticed that Wireshark 0.99.6pre1 came in on testing so it would be great if you can send the new package files to the list so they can be put into the repository before the real 0.99.6 comes out. Thanx, Jaap ___ Wireshark-dev mailing

Re: [Wireshark-dev] 0.99.6 release postponed

2007-07-03 Thread Jaap Keuter
Hi, Now that WinPcap 4.0.1 is out a release of 0.99.pre3 is possible. I would like to request holding off until I've got the debian packaging updates from Frederic Peters in, which I've got lined up in my working copy. Tomorrow morning, when I'm fresh and sober, I'll review them one last time b

Re: [Wireshark-dev] 0.99.6 release postponed

2007-07-04 Thread Jaap Keuter
day, and I've been assigned Brisket > Duty. :) > > Jaap Keuter wrote: >> Hi, >> >> Now that WinPcap 4.0.1 is out a release of 0.99.pre3 is possible. >> I would like to request holding off until I've got the debian packaging >> updates from Fred

Re: [Wireshark-dev] diameter dissector and ntp timestamp rollover

2007-07-05 Thread Jaap Keuter
Hi, You could play around with ntp_fmt_ts(const guint8 *reftime) and see what happens. That function is found in packet-ntp.c and the source for the code in packet-diameter.c. Thanx, Jaap cco wrote: > hi! > > the people designing ntp came up with a timestamp format which rolls over > every 1

Re: [Wireshark-dev] AS-SIP Disector?

2007-07-05 Thread Jaap Keuter
Hi, If you can give us a link to a good reference document we may be able to cook something up. Thanx, Jaap Raymond Jender wrote: > I am in search of an AS-SIP sniffer. Wireshark can > handle sniffing SIP, but I need to be able to sniff > Assured Services SIP messages. > > Is there a version o

Re: [Wireshark-dev] Wireshark 0.99.6 is now available

2007-07-06 Thread Jaap Keuter
Hi, It would have been nice if it contained an up to date user manual i.s.o. a 5 month old version. Could that item be added to the release procedure? I've already checked in a patch that proposes to install WinPcap 4.0.1 over 4.0.0, which the current installer doesn't do. Thanx, Jaap Gerald

Re: [Wireshark-dev] Wireshark conference

2007-07-06 Thread Jaap Keuter
Hi, I think everyone should bring his passport so we can address Bug 1086. Thanx, Jaap Gerald Combs wrote: > This is entirely hypothetical, but if someone were to host a 3-day > Wireshark conference, what sort of sessions would you be interested in? > If enough developers attended, would there b

Re: [Wireshark-dev] [PATCH] BACnet bacapp fixes for bug 1670

2007-07-06 Thread Jaap Keuter
Hi, Checked in revision 22262 and closed bug 1670. Thanx, Jaap Steve Karg wrote: > Hello Developers, > > Attached is a patch that fixes bug 1670 and related issues. > > For the BACnet GetEventInformation-ACK request dissector: > 1. Corrected BitString decoding for acknowledgedTransitions and e

Re: [Wireshark-dev] How do I call anothes dissector

2007-07-07 Thread Jaap Keuter
Hi, See the README.developer file in the doc directory, chapter 1.8 Calling Other Dissectors. Thanx, Jaap Yashwant Shitoot wrote: > Hello, > > My protocol is encapsulated in udp. I am able to dissect this part without > problem. The remaining data I need to pass to another protocol RTCP or >

Re: [Wireshark-dev] Run-time error (samr.hnd disappeared)

2007-07-09 Thread Jaap Keuter
Hi, In the mean time let me remind everyone it is not allowed to simply drop preferences from your code. Once it's in there it's in the preference files and warnings like this appear if you do take it out. The mechanism to solve this is by replacing your preference registration by: prefs_reg

Re: [Wireshark-dev] Patches to update PANA Protocol dissector

2007-07-09 Thread Jaap Keuter
Hi, Committed in revision 22282. Thanx, Jaap Victor Fajardo wrote: > Hi Jaap, > > I found a small problem with the previous patch I've sent. I've attached > a patch that fixes this issue; the patch is based on the latest rev I > could get. > > regards, > victor > >> Hi, >> >> Committed in r

Re: [Wireshark-dev] size of wireshark installation files

2007-07-10 Thread Jaap Keuter
Hi, Should we make dissector_add() and friends fail silently when the referenced dissector is not available? Currently the g_assert() is killing, while a return would suffice. This becomes more relevant since we can delete a dissector on the fly, so we may run into this assert while not expecte

Re: [Wireshark-dev] New WiMAX R6 plug-in

2007-07-10 Thread Jaap Keuter
Hi, First thing to so it testdrive it using fuzztest. Have a collection of capture files ready which fuzztest will feed to your Wireshark+plugin. That way you may find bugs not found during code review. Then make sure all support files are in as stated in README.plugin. Then 'make clean' the pl

Re: [Wireshark-dev] GPL license question

2007-07-11 Thread Jaap Keuter
Hi, Actually I disagree ;) From reading below the question is "is it an independent and separate work"? The GNU FAQ says its not: http://www.gnu.org/licenses/gpl-faq.html#GPLAndPlugins Thanx, Jaap [EMAIL PROTECTED] wrote: > > [EMAIL PROTECTED] wrote on 07/11/2007 10:45:27 AM: > >> No, you c

Re: [Wireshark-dev] GPL license question

2007-07-11 Thread Jaap Keuter
[EMAIL PROTECTED] wrote: > > [EMAIL PROTECTED] wrote on 07/11/2007 01:16:26 PM: > >> Hi, >> >> Actually I disagree ;) >> >> From reading below the question is "is it an independent and separate >> work"? The GNU FAQ says its not: >> http://www.gnu.org/licenses/gpl-faq.html#GPLAndPlugins > > Unf

Re: [Wireshark-dev] [patch] fix omission in wcap.c

2007-07-12 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap Jim Paris wrote: > Hi, > > The encap_table_base in wcap.c is missing an entry. > This causes e.g. "dumpcap -i usb3 -L" to output: > > Data link types (use option -y to set): > USB_LINUX >(MPEG) > > -jim > > diff -urN --exclude=debian wireshark-0.99.6pre1

Re: [Wireshark-dev] Solaris C compiler doesn't like anonymous unions

2007-07-12 Thread Jaap Keuter
Hi, Added a remark to README.developer to that effect. Thanx, Jaap Albert Chin wrote: > Fix to avoid anonymous union which Sun Studio 11 C compiler doesn't > like. > > > ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshar

Re: [Wireshark-dev] [Wireshark-commits] rev 22259: /trunk/packaging/nsis/ /trunk/packaging/nsis/: wireshark.nsi

2007-07-12 Thread Jaap Keuter
Hi, Then maybe you've a scheme how to work this into the installer as well? I've tried but failed to see a future proof construct. Thanx, Jaap Gianluca Varenni wrote: > - Original Message - > From: "Ulf Lamping" <[EMAIL PROTECTED]> > To: > Sent: Thursday, July 12, 2007 7:11 PM > Subjec

Re: [Wireshark-dev] Win32: remove binary zlib.dll completely and compile it for all MSVC variants?

2007-07-13 Thread Jaap Keuter
Graham Bloice wrote: > Ulf Lamping wrote: >> Hi List! >> >> After I repeatedly stumbled over not having the right form of the >> zlib.dll on my computer (MSVC6: binary dll, all other MSVC: compile it >> yourself from sources) and the setup target only downloads one of them, >> it makes me think

Re: [Wireshark-dev] decode data & display the same

2007-07-16 Thread Jaap Keuter
NKS wrote: > Sub: how can i hack wireshark to show the actual data(decoded) ? > > Please have a look at the following screenshot(wireshark) > hxxp://img512.imageshack.us/img512/1255/data1448bytesyb7.jpg > ( same screenshot also available at the following link > hxxp://i11.tinypic.com/4qr3j48.jpg )

Re: [Wireshark-dev] error in changing from built in to plugin

2007-07-16 Thread Jaap Keuter
Hi, You'll need a maintainer clean for that. Or maybe deleting epan/dissectors/register.* is enough. Thanx, Jaap Yashwant Shitoot wrote: > Hello, > > I am changing my dissector from built in to plugin > removed it from > Makefile.common in 'epan/dissectors'. Added everywhere > according to >

Re: [Wireshark-dev] Windows Vista compilation

2007-07-21 Thread Jaap Keuter
Hi, it's specifically talking about 'Windows SDK for Windows Vista', not vc2005ee on Vista, so this should be oke. You may want to consider working with 0.99.6 sources though. Thanx, Jaap sandeep gangadharan wrote: > Hello all > Will my compillation work with vc2005ee+windows >

Re: [Wireshark-dev] Toolbar icon sizes on Windows too small?

2007-07-24 Thread Jaap Keuter
Hi, Look for gtkrc and see that it declares two toolbars: large and small. The small one is used, but changing this into large gets you the larger icons. Thanx, Jaap Ulf Lamping wrote: >> Just out of curiosity, i noticed the size of toolbar icons in the Windows >> version is rather small. >> T

Re: [Wireshark-dev] [PATCH] packet-bootp.c: enhancement to decode DHCP option 121

2007-07-24 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap Francois-Xavier Le Bail wrote: > Hi, > > The following patch decode DHCP option 121. > (RFC 3442) > > Output example : > > Option: (t=121,l=59) Classless Static Route > Option: (121) Classless Static Route > Length: 59 > Value: > 00C0A80301080AC0A80302090B80C0A8

Re: [Wireshark-dev] New WiMAX R6 plug-in

2007-07-24 Thread Jaap Keuter
Hi, Overruns aren't a problem as long as you end the value_string array with the closing tuple {0, NULL}. Thanx, Jaap Nitin Naveen wrote: > Hello, > > Thank you Martin and Sawada san for your comments. > I am OK with any plug-in name and I leave it up to you to decide. > I also accept most of

Re: [Wireshark-dev] .NET Based Dissector Plugin

2007-07-25 Thread Jaap Keuter
Hi, I would say a page below http://wiki.wireshark.org/Development Thanx, Jaap Kelvin Proctor wrote: > G'day Wireshark Team, > > In the last few days I have succeeded in getting a dissector plugin > running > that is a mixed-mode C++ assembly (for those unfamiliar with > Microsoft.NET > this dl

[Wireshark-dev] Wierd code in m2m plugin

2007-07-27 Thread Jaap Keuter
Hi, Can anyone tell me why this hideous hack is in the m2m plugin? > case TLV_FRAME_NUM: > /* get the frame number */ > g_frame_number = tvb_get_ntoh24( tvb, > offset ); >

Re: [Wireshark-dev] Wierd code in m2m plugin

2007-07-27 Thread Jaap Keuter
so this has no place in production code. Shouldn't we rip it out? Thanx, Jaap Jeff Morriss wrote: > Jaap Keuter wrote: >> Hi, >> >> Can anyone tell me why this hideous hack is in the m2m plugin? > > My reading of it is that someone was re-using (in his/he

Re: [Wireshark-dev] [PATCH]: New packet disscetor for IEEE1588v2 / PTPv2

2007-07-30 Thread Jaap Keuter
Hi Markus, Two things. First we've recently changed our patch submission policy, instead of posting to the lis you can attach you patches to a bugzilla entry and request review for submission. This is done to not let patches, like yours, get overlooked. Second you patch reverts back to the Ethere

Re: [Wireshark-dev] bug in SHIM6 control message - UPD REQ and UPD ACK

2007-08-01 Thread Jaap Keuter
Hi, Better file a bugreport on that. Thanx, Jaap On Wed, 1 Aug 2007 [EMAIL PROTECTED] wrote: > Folks > > in epan/dissector/packet-ipv6.h there is a mistacke in the assigned > number of the update request and update ack shim6 control message. > > Accordingly to draft-ietf-shim6-proto-08 page 93

Re: [Wireshark-dev] doubt regarding the creation of a disector for the PCE protocol

2007-08-06 Thread Jaap Keuter
Hi, Wireshark can help you here. See doc/README.developer, chapter 2.7.1 Using tcp_dissect_pdus(). Thanx, Jaap Silvia Cristina Tejedor wrote: > Dear Mr, > > I m working on the packet reception and treatement with the PCE protocol > which runs over TCP. The PCE protocol takes the TCP data and

Re: [Wireshark-dev] Patches to update PANA Protocol dissector

2007-08-07 Thread Jaap Keuter
Hi, Two things. 1. We've recently changed the patch submission policy to go through bugzilla. This in order to have patches like this not overlooked. 2. I can't comment on the merits of the patch in relation to the draft referenced, but I've spotted this code error: /* Reserved field

Re: [Wireshark-dev] [Patch] Unistim dissector plugin [Sample captures attached] (fwd)

2007-08-10 Thread Jaap Keuter
Hi Don, This is the last message I've sent about UNISTIM. Since then nothing was heard. Still we would like to get it in, since there's interest in it. Are you still working on it? Thanx, Jaap -- Forwarded message -- Date: Thu, 21 Jun 2007 08:47:19 +0200 From: J

Re: [Wireshark-dev] Nortel Unistim Protocol PDF

2007-08-10 Thread Jaap Keuter
Hi, You may want to follow the external link listed. Thanx, Jaap J P wrote: > Hi Everyone, > > Where can I get a copy of the Nortel Unistim Protocol Specification > PDF referred in http://wiki.wireshark.org/UNISTIM? > > > > Wireshark > > The Unistim dissector is parti

Re: [Wireshark-dev] p2p_dir

2007-08-11 Thread Jaap Keuter
Oh no, not this flamewar again... On the plus side: yes, your development cycle and intermediate release is easier. On the min side: You don't have the full API (on Win32 that is). IMHO when a protocol is complete (stable RFC or whatever standard bodies publish) and dissector is fully developed

<    1   2   3   4   5   6   7   8   9   10   >