Re: [Wireshark-dev] Query on status of patches

2007-03-09 Thread ronnie sahlberg
I know it is very frustrating when pathces and ideas are being ignored. Please, for many of the developers of wireshark, wireshark is only an interesting hobby for which time to commit is very limited. Life and work situations affect time being available. This unfortuantely results in situations

Re: [Wireshark-dev] Help on H323 Port Filtering

2007-03-09 Thread Ulf Lamping
ARAMBULO, Norman R. wrote: Hi, Right now we are using tshark for capturing packets on our network and use it to translate, it seem theres a lot of packet loss. Is it possible to dissect or parse a captured packet for VOIP since some of its succeding packets were eventually lost, we have

Re: [Wireshark-dev] Query on status of patches

2007-03-09 Thread Douglas Pratley
I'm lucky - I was being paid to do eight hours a day writing Wireshark code for the first two months of the year. I quite understand that this doesn't necessarily match up with the available time of the reviewers... it also perhaps resulted in larger patches than would normally be submitted. As

[Wireshark-dev] Adding a data item to gsm map

2007-03-09 Thread manogna manogna
Hi All, I’ve to add a data item to GSM MAP dissector. The data item is : myAppData ::= SEQUENCE { myvar1 [0] MyVar1, myvar2 [1] MyVar2 OPTIONAL } Additional information is as follows. TC-BEGIN may carry proprietary information. This is applicable only when

Re: [Wireshark-dev] Adding a data item to gsm map

2007-03-09 Thread Andreas Fink
whats the purpose of that? extend GSM MAP with private extensions or extending GSM MAP with extensions which appeared in the standard? On 09.03.2007, at 11:35, manogna manogna wrote: Hi All, I’ve to add a data item to GSM MAP dissector. The data item is : myAppData ::= SEQUENCE {

[Wireshark-dev] Help on H323 Port Filtering

2007-03-09 Thread ARAMBULO, Norman R.
Hi, Right now we are using tshark for capturing packets on our network and use it to translate, it seem theres a lot of packet loss. Is it possible to dissect or parse a captured packet for VOIP since some of its succeding packets were eventually lost, we have found some TPKT and Q.931

Re: [Wireshark-dev] Bug 491 : time delta behaviour

2007-03-09 Thread Jeff Morriss
Sake Blok wrote: Hi All, Last week I ran into bug 491 which describes the unexpected behaviour of frame.time_delta. This filter is calculated as Time delta since previous displayed frame, where one could expect it to be calculated as Time delta since previous frame in the trace-file.

Re: [Wireshark-dev] Bug 491 : time delta behaviour

2007-03-09 Thread Sake Blok
On Fri, Mar 09, 2007 at 09:59:33PM +0800, Jeff Morriss wrote: Sake Blok wrote: 1) add another field to incorporate the Time delta since previous frame in the tracefile. This is an option Jeff Morriss suggested already. 2) have an option in the frame protocol preferences to

Re: [Wireshark-dev] private development and syncing process ...

2007-03-09 Thread Luis Ontanon
Hi, If you want to discuss about how to write a dissector, how to fix a bug, about adding a new feature or similar development issues this is the right forum. If you ever want your patch applied to the trunk so it is made available to everyone with the rest of wireshark this is the right place to

Re: [Wireshark-dev] private development and syncing process ...

2007-03-09 Thread Jaap Keuter
Hi, Indeed these are the steps to take. Don't distribute outside your company without providing the sources. Thanx, Jaap On Fri, 9 Mar 2007, Ravi Kondamuru wrote: Hi, I am looking for a model on how wireshark dissector/wiretap addons are developed exclusively for use within a company. I

[Wireshark-dev] Wireshark APIs for display

2007-03-09 Thread MKS {}
Hi, I have a protocol decode libraray for a protocol I have written in C. This parses the packet stream and decodes packets. I wanted to use the UI and packet capture capabilities of Wireshark to capture packes and display the messages. I wasn't interested in the wireshark API's for parsing the

[Wireshark-dev] Dissector API changes? (was: Re: [Wireshark-bugs] [Bug 1199] Add subpackage devel for convenient generation of custom dissector plugins)

2007-03-09 Thread Stephen Fisher
Out of curiosity, what sort of changes are we interested in making in the current API? On Sat, Mar 10, 2007 at 12:12:07AM +, [EMAIL PROTECTED] wrote: http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1199 --- Comment #3 from [EMAIL PROTECTED] 2007-03-10 00:12 GMT --- Note that

Re: [Wireshark-dev] Wireshark APIs for display

2007-03-09 Thread Guy Harris
On Mar 9, 2007, at 1:51 PM, MKS {} wrote: I have a protocol decode libraray for a protocol I have written in C. This parses the packet stream and decodes packets. I wanted to use the UI and packet capture capabilities of Wireshark to capture packes and display the messages. I wasn't

Re: [Wireshark-dev] Dissector API changes? (was: Re: [Wireshark-bugs] [Bug 1199] Add subpackage devel for convenient generation of custom dissector plugins)

2007-03-09 Thread Guy Harris
On Mar 9, 2007, at 4:55 PM, Stephen Fisher wrote: Out of curiosity, what sort of changes are we interested in making in the current API? Well, some of the ones I'd like to see made are at http://wiki.wireshark.org/Development/Wishlist See, for example, the first item under Dissector

Re: [Wireshark-dev] Wireshark APIs for display

2007-03-09 Thread Jaap Keuter
Hi, I've seen it been done. It was based on a message decoder that passed back a data structure of the message. Then there was a whole bunch of wireshark code to display all the structure members. Varying messages had varying structures so it ended up being a whole lot of