Re: [Wireshark-users] Wireshark 0.99.7pre1 & G729 Codec

2007-11-28 Thread Kukosa, Tomas
Hi, it can not be included because of licence issue but there is new codec plugin type which makes easier extending Wireshark with new codecs. This plugin mechanism is used only in RTP player. It is not used in RTP saving now. Tomas Mailcode: Ph5U5F3p

Re: [Wireshark-users] how to convert g729 RTPstream into anyplayableformat?

2007-11-08 Thread Kukosa, Tomas
Hi, example plugin for G.723.1 and G.729A and G.722 based on the Imtelephone libraries is attached. It contains only Windows makefiles. Please, could anybody create Linux makefiles and test it under Linux? Then we could put it somewhere into the svn. BTW for more codecs see audio plugins in

Re: [Wireshark-users] how to convert g729 RTP stream into anyplayableformat?

2007-11-05 Thread Kukosa, Tomas
Hi, I have implemented codecs plugin based on libraries from Imtelephone http://www.imtelephone.com/ I believe it should not be license problem if I public just my stub code like an example. Should we have such an example on Wiki or directly in the svn source? Regards, Tomas __

Re: [Wireshark-users] How to import RRC hex dump into Wireshark fordecoding

2007-10-23 Thread Kukosa, Tomas
It is necessary to assign to the user DLT specific RRC message type (instead of "rrc"). There are following message types registered: rrc.dl.dcch rrc.dl.dcch rrc.ul.dcch rrc.dl.ccch rrc.ul.ccch rrc.pcch rrc.dl.shcch rrc.ul.shcch rrc.bcch.fach rrc.bcch.bch rrc.mcch rrc.msch Unfortunately with thi

[Wireshark-users] H.323 traces with H.460.x

2007-10-03 Thread Kukosa, Tomas
Hi, does enybody have available traces with various H.460.x features? Regards, Tomas ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users

Re: [Wireshark-users] SSL Decryption

2007-08-10 Thread Kukosa, Tomas
Hi, it is possible to decrypt the session if you retrieve somehow from client the master secret and some addtional information. There is not whole mechanism for it in the Wireshark now but there is function ssl_set_master_secret(). If you pass all necessary information to this function it can

Re: [Wireshark-users] Fw: I am not decode the Nbap andsscopmessages.

2007-08-07 Thread Kukosa, Tomas
Hi, BTW the NBAP reports [Malformed Packet: NBAP] now but I am working on updated NBAP (regnerated from last ASN1 source). I hope it will be fixed. Tomas > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Anders Broman > Sent: Tuesday, August

Re: [Wireshark-users] Decrypt SSL fails withtestcaseSampleCaptures/snakeoil2_070531.tgz

2007-07-17 Thread Kukosa, Tomas
7 11:50 AM > To: Community support list for Wireshark > Subject: Re: [Wireshark-users] Decrypt SSL fails > withtestcaseSampleCaptures/snakeoil2_070531.tgz > > Hello Tomas, > > On Tuesday 17 July 2007 08:46, Kukosa, Tomas wrote: > > it is strange as it works fine for me (on

Re: [Wireshark-users] SSL Decrypt

2007-07-01 Thread Kukosa, Tomas
Hi, yes, you need private server key. You have to be server administrator to get it somewhere from the server. You can not get it if you are only the client. Regards, Tomas From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Asaf Sent: Sunday, J

Re: [Wireshark-users] ssl decryption on Win32 (snakeoil example)?

2007-06-20 Thread Kukosa, Tomas
Hi, try to use absolute path to rsasnakeoil2.key (e.g. c:\ssl_example\rsasnakeoil2.key) to be sure that the right file is read. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jon Polacheck Sent: Wednesday, June 20, 2007 7:55 PM To: wireshark-users@wir

Re: [Wireshark-users] How to decode non-standard SSL traffic

2007-01-23 Thread Kukosa, Tomas
Hi, I have experinece only with TLS1_CK_RSA_WITH_AES_128_SHA. There are more supported suites but I do know if they work well. Mailcode: NdD2sKHg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, January 23, 2007 8:28 PM To

Re: [Wireshark-users] How to decode non-standard SSL traffic

2007-01-23 Thread Kukosa, Tomas
It seems that some unknown cipher suite is used: dissect_ssl3_hnd_srv_hello can't find cipher suite 39 39 looks like TLS1_CK_DHE_RSA_WITH_AES_256_SHA is it possible? Mailcode: NdD2sKHg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]

Re: [Wireshark-users] How to decode non-standard SSL traffic

2007-01-23 Thread Kukosa, Tomas
Hi, more important for detecting why it is not decoded are packets from SSL handshake you should see e.g. following: ... dissect_ssl3_hnd_hello_common found CLIENT RANDOM -> state 0x01 ... dissect_ssl3_hnd_hello_common found SERVER RANDOM -> state 0x13 dissect_ssl3_hnd_srv_hello found CIPHER 0x0

Re: [Wireshark-users] How to decode non-standard SSL traffic

2007-01-22 Thread Kukosa, Tomas
Hi, try to enable SSL debug output (with setting debug file in SSL preferences). Either you will see in the file what goes wrong or you can send it here. BTW if it is possible skip to version 0.99.5pre2 which contains a little bit better debug SSL output. Tomas Mailcode: NdD2sKHg -Origina

Re: [Wireshark-users] Specify SSL Keys_listtowireshark-0.99.5-SVN-20434

2007-01-17 Thread Kukosa, Tomas
-ssl --enable-threads --with-pcre --with-lua 'CFLAGS=-DHAVE_LUA_5_1' However, the output of the configure shows Use gnutls library: no. What flag do I need to use with configure in order to enable GnuTLS library use? Best regards, Vijay "Kukosa, Tomas" <[

Re: [Wireshark-users] Specify SSL Keys_list towireshark-0.99.5-SVN-20434

2007-01-16 Thread Kukosa, Tomas
Hi, this preference is still the same. Could you open wireshark and check in GUI if you can see it? If not it seems that that version was compiled without GnuTLS. Regards, Tomas From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Vijay Sitaram

Re: [Wireshark-users] openvpn and packet sniffing

2006-12-05 Thread Kukosa, Tomas
I am affraid those UDP packets are OpenVPN packet, are not? I.e. it would be necessary to implement OpenVPN (as I know it is not implemented) and its decryption. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris Sent: Tuesday, December 05, 2006 9

Re: [Wireshark-users] Decrypting SNMP

2006-10-31 Thread Kukosa, Tomas
There is not implemented such a feature in the Wireshark now.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Naveen BMSent: Monday, October 30, 2006 6:25 AMTo: wireshark-users@wireshark.orgSubject: [Wireshark-users] Decrypting SNMP Hi,   Can someone let me know how SNMP

Re: [Wireshark-users] SSL decryption -- RSA Key format

2006-10-27 Thread Kukosa, Tomas
I am not sure now if it is PKCS#8 but it has to be saved as only unencrypted privete key in PEM format. Regards, Tomas Od: [EMAIL PROTECTED] za uživatele Baker, Brian Odesláno: pá 27.10.2006 17:33 Komu: wireshark-users@wireshark.org Předmět: [Wireshark-users]

Re: [Wireshark-users] Setting SSL preference on Windows

2006-06-28 Thread Kukosa, Tomas
  The roadmap can be seen here http://wiki.wireshark.org/Development/Roadmap     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kulawat WongsarojSent: Thursday, June 29, 2006 8:02 AMTo: Community support list for WiresharkSubject: Re: [Wireshark-users] Setting SSL preferenc

Re: [Wireshark-users] Setting SSL preference on Windows

2006-06-28 Thread Kukosa, Tomas
Hi   I guess you have Wireshark compiled without crypto library, i.e. withou decryption support. It is disabled in Windows by default now.   You can either recompile it yourself or wait for next release where it should be enabled.   Regards,   Tomas From: [EMAIL PROTECTED] [mailto:[EMAI