Re: [Wireshark-dev] Display filter implementation

2012-07-04 Thread Lloyd
On Wed, Jul 4, 2012 at 12:05 AM, Guy Harris g...@alum.mit.edu wrote: On Jul 2, 2012, at 8:12 AM, Lloyd wrote: I would like to know more about Wireshark display filters. Is its internals are documented? Especially the display filter execution virtual machine's instruction set. I saw the

Re: [Wireshark-dev] Display filter implementation

2012-07-04 Thread Gilbert Ramirez
There is a makefile target called dftest that is used to test the display filter engine. Its dependencies are the minimal set of dependencies you need. Gilbert On Jul 4, 2012 3:18 AM, Lloyd lloydkl.t...@gmail.com wrote: On Wed, Jul 4, 2012 at 12:05 AM, Guy Harris g...@alum.mit.edu wrote: On

[Wireshark-dev] Corrupted c-areas 1.71 zip archive

2012-07-04 Thread Tobias Weiss
Hi everyone, I've developed a plugin on Linux which works just fine. Now I wanted to create a Windows installer which includes the new plugin. Unfortunately when executing nmake -f Makefile.nmake setup I always get the following error:

Re: [Wireshark-dev] Corrupted c-areas 1.71 zip archive

2012-07-04 Thread Pascal Quantin
Le 04/07/2012 19:25, Tobias Weiss a écrit : Hi everyone, I've developed a plugin on Linux which works just fine. Now I wanted to create a Windows installer which includes the new plugin. Unfortunately when executing nmake -f Makefile.nmake setup I always get the following error:

Re: [Wireshark-dev] Corrupted c-areas 1.71 zip archive

2012-07-04 Thread Tobias Weiss
Pascal Quantin wrote on 07/04/2012 02:23:59 PM: it is working perfectly fine here. I guess you have a partially downloaded file, thus the corrupted warning. Just erase your /cygdrive/c/wireshark-win32-libs-1.8/c-ares-1.7.1-win32ws.zip file and relaunch nmake -f Makefile.nmake setup. Hi

[Wireshark-dev] [RFC] A patch to set TCP window scaling when options weren't captured

2012-07-04 Thread Martin Mathieson
This was discussed a little bit at Sharkfest. I often need to analyse TCP streams where I only see part of a very long TCP session, not including the initial options where window scaling was set (but where I know the scaling because of other, very similar runs). Without knowing the proper

Re: [Wireshark-dev] Corrupted c-areas 1.71 zip archive

2012-07-04 Thread Pascal Quantin
2012/7/4 Tobias Weiss twe...@ra.rockwell.com Pascal Quantin wrote on 07/04/2012 02:23:59 PM: it is working perfectly fine here. I guess you have a partially downloaded file, thus the corrupted warning. Just erase your /cygdrive/c/wireshark-win32-libs-1.8/c-ares-1.7.1-win32ws.zip file and

Re: [Wireshark-dev] Corrupted c-areas 1.71 zip archive

2012-07-04 Thread Tobias Weiss
Pascal Quantin wrote on 07/04/2012 03:33:11 PM: The file should have 125210 bytes (md5: e20bed515f11e4f24275208d1d718fc9). You can manually download from http://anonsvn.wireshark.org/ wireshark-win32-libs/tags/2012-05-30/packages/c-ares-1.7.1-win32ws.zip The download was stopped by the

Re: [Wireshark-dev] Display filter implementation

2012-07-04 Thread Lloyd
On Wed, Jul 4, 2012 at 6:50 PM, Gilbert Ramirez g...@alumni.rice.edu wrote: There is a makefile target called dftest that is used to test the display filter engine. Its dependencies are the minimal set of dependencies you need. Gilbert On Jul 4, 2012 3:18 AM, Lloyd lloydkl.t...@gmail.com