[Wireshark-dev] Using wireshark apis

2008-04-03 Thread Gupta, Pavan
Hello, I would like to use Wireshark library apis to dissect packets. - Call a function in Wireshark providing the filename or buffer as input. File/buffer will have data in pcap format. This function should return me dissected data. Is there any function that can be called directly? I

Re: [Wireshark-dev] jumping tcp packets

2008-04-03 Thread ronnie sahlberg
You would only be able to see the packets that you are fast enough to capture, process and write to disk. In particular for high speed networks it is an unfortunate fact-of-life that you wont be able to capture packets and write them to disk at the same speed as the packets arrive at the nic and

[Wireshark-dev] jumping tcp packets

2008-04-03 Thread Maria de Fatima Requena
Hi I am implementing a skinny sniffer using winpcap and I am experimenting problems while parsing packets. Some of them are just missed to my application. I am using wireshark to see what is really happening, and I cant understand it This is part of my code (callback function called by

Re: [Wireshark-dev] jumping tcp packets

2008-04-03 Thread Maria de Fatima Requena
And so, any posible solution?. (Thank you so much for such a quick response) María de Fátima Requena Cabot (2488) +34 91 787 23 00 alhambra-eidos.es   -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] En nombre de ronnie sahlberg Enviado el: jueves, 03 de abril de

[Wireshark-dev] encapsulation type for layer 1 messages (strings)

2008-04-03 Thread Rolf Fiedler
Hi everyone, I am currently working on modifying the wiretap modules for EyeSDN traces to use WTAP_ENCAP_PER_PACKET, which is working nicely (Q.931/DSS1, SS7/MTP2, PPP, X.25 and ATM support on the way for these traces). However, there is one thing I can not match to the ENCAP types at the moment

[Wireshark-dev] plugin Linux Makefile failure

2008-04-03 Thread Bob Pultorak
I have added a few custom plugins to the new release (1.0.0). I was able to successfully compile the code before adding anything. I followed the DEVELOPER.plugins file for instruction how to add a new plugin correctly. I updated all the necessary files, ran autogen.sh and configure. When

Re: [Wireshark-dev] libwireshark documentation?

2008-04-03 Thread Sébastien Tandel
If you have the source code, you should notice the doc directory in which stands several readme's describing the API. I did notice the doc/ directory and the various README files. However, the documentation in the doc/ directory is written for dissector writers, not for people writing

[Wireshark-dev] Error in FAQ File

2008-04-03 Thread Volker Sonnak
Hello, as I couldn't find an email adress for a simple error-report I used the developers list - please, don't be too angry at me if that went out to a great number of persons. In the FAQ, Q 1.14, I found a little spelling error: CaputrePrivileges instead of CapturePrivileges (please see

[Wireshark-dev] Plugin Makefile failure

2008-04-03 Thread Bob Pultorak
I have added a few custom plugins to the new release (1.0.0). I was able to successfully compile the code before adding anything. I followed the DEVELOPER.plugins file for instruction how to add a new plugin correctly. I updated all the necessary files, ran autogen.sh and configure. When

Re: [Wireshark-dev] VoIP call -- RTP trace --

2008-04-03 Thread Antoine Reid
Good morning! I have checked your trace quickly. I do a lot of SIP here too (analyzing 3GB+ traces often.. have to splice them using editcap most of the time..) Here are my general comments: In the beginning of the trace, we see a lot of icmp port unreachable when 62.48.163.65 is trying to

Re: [Wireshark-dev] Using wireshark apis

2008-04-03 Thread Eloy Paris
Hi Pavan, On Thu, Apr 03, 2008 at 12:23:04PM +0530, Gupta, Pavan wrote: I would like to use Wireshark library apis to dissect packets. - Call a function in Wireshark providing the filename or buffer as input. File/buffer will have data in pcap format. This function should return me

Re: [Wireshark-dev] plugin Linux Makefile failure

2008-04-03 Thread Jaap Keuter
Hi, Looks like that somewhere in the process an ASCII editor is used which has the option Replace tabs by spaces enabled. Look very carefully at the settings of your editors. Thanx, Jaap _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bob Pultorak Sent: 2008-Apr-03

Re: [Wireshark-dev] Error in FAQ File

2008-04-03 Thread Jaap Keuter
Hi, Normally we would request you to open a bug at bugs.wireshark.org but I don't think Gerald does mind. Thanx, Jaap -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Volker Sonnak Sent: 2008-Apr-02 21:46 To: wireshark-dev@wireshark.org Subject:

Re: [Wireshark-dev] VoIP call -- RTP trace --

2008-04-03 Thread Jaap Keuter
Hi, This call has its media encoded in G.729. You cannot decompress that without a licenced module, hence you cannot play it/save it. There is an interface to a G.729 decompressor in Wireshark, but you'll have to compile that in. Search the developer list archive for more info if you want to go

Re: [Wireshark-dev] VoIP call -- RTP trace --

2008-04-03 Thread bruno . mresende
Hi Jaap, yes I wat to go that way for sure. How can I compile it? Many thanks. With regards, Bruno. Citando Jaap Keuter [EMAIL PROTECTED]: Hi, This call has its media encoded in G.729. You cannot decompress that without a licenced module, hence you cannot play it/save it. There is an

Re: [Wireshark-dev] encapsulation type for layer 1 messages (strings)

2008-04-03 Thread Luis EG Ontanon
I think that's the way you just need to add WTAP_ENCAP_PLAIN_TEXT to wtap.h and have proto_reg_handoff_text_lines() add text_lines_handle to wtap.encap table On Thu, Apr 3, 2008 at 4:29 PM, Rolf Fiedler [EMAIL PROTECTED] wrote: Hi everyone, I am currently working on modifying the

Re: [Wireshark-dev] plugin Linux Makefile failure

2008-04-03 Thread Bob Pultorak
Thanks, I fixed that now I get make[3]: *** No rule to make target `../../aclocal-fallback/glib.m4', needed by `Makefile.in'. Stop. On Thu, Apr 3, 2008 at 11:55 AM, Jaap Keuter [EMAIL PROTECTED] wrote: Hi, Looks like that somewhere in the process an ASCII editor is used which has the

Re: [Wireshark-dev] Using wireshark apis

2008-04-03 Thread Luis EG Ontanon
Merge, don't fork! Unless unfeasible, the drive should be to add functionality to the existing apps instead of writing new ones. libwireshark was made into a lib to hold what wireshark and tshark had to have in common, not to become a dissection libary for other apps. I do not think there has

Re: [Wireshark-dev] VoIP call -- RTP trace --

2008-04-03 Thread Maria de Fatima Requena
Can wireshark play files? I am working on smth similar, and I need an external tool to generate wav -Mensaje original- De: [EMAIL PROTECTED] en nombre de [EMAIL PROTECTED] Enviado el: jue 03/04/2008 17:38 Para: wireshark-dev@wireshark.org Asunto: [Wireshark-dev] VoIP call -- RTP trace

Re: [Wireshark-dev] VoIP call -- RTP trace --

2008-04-03 Thread bruno . mresende
Yes it?s true. The thing is that I am working with codec G729 and I am not able to decode or play the trace ?cause this codec has a patent. G729 is a request from the customer I?ve found a code in C++, but I do not know how to compile it in Wireshark. Regards, Bruno. Citando Maria de

Re: [Wireshark-dev] VoIP call -- RTP trace --

2008-04-03 Thread Luis EG Ontanon
To use external applications (quicktime and rtpreplay) to replay rtp streams shouldn't be that complex. it needs - to extract all useful information from sdp, h245, and other media control protocols - write an sdp file that mimics the media (very easy for sdp, just rewrite addresses and ports) -

Re: [Wireshark-dev] Error in FAQ File

2008-04-03 Thread Gerald Combs
Fixed. Thanks! Jaap Keuter wrote: Hi, Normally we would request you to open a bug at bugs.wireshark.org but I don't think Gerald does mind. Thanx, Jaap -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Volker Sonnak Sent: 2008-Apr-02 21:46

[Wireshark-dev] buildbot failure in Windows-XP-x86

2008-04-03 Thread buildbot-no-reply
The Buildbot has detected a new failure of Windows-XP-x86. Full details are available at: http://buildbot.wireshark.org/trunk/Windows-XP-x86/builds/4160 Buildbot URL: http://buildbot.wireshark.org/trunk/ Build Reason: Build Source Stamp: HEAD Blamelist: lego BUILD FAILED: failed shell_5

Re: [Wireshark-dev] Using wireshark apis

2008-04-03 Thread Stephen Fisher
On Thu, Apr 03, 2008 at 12:14:19PM -0400, Eloy Paris wrote: I was thinking about using this little program as the basis of new documentation on how to write applications that use libwireshark services. Perhaps write a README.libwireshark for the doc/ directory and host the source code for

Re: [Wireshark-dev] Using wireshark apis

2008-04-03 Thread Eloy Paris
Luis, On Thu, Apr 03, 2008 at 07:57:02PM +0200, Luis EG Ontanon wrote: Merge, don't fork! Unless unfeasible, the drive should be to add functionality to the existing apps instead of writing new ones. I don't know what the other guys that have asked about libwireshark have in mind for the