[Wireshark-dev] packet-rlc.c changes

2012-08-03 Thread Rishie Sharma
Hi! I am the one who (through Anders Broman) made changes to RLC. I subscribed to the list today to comment on some of the changes. Remove a created-but-unused subtree (and its ett). It's not obvious to me whether this tree was going to be used for something or not. I was going to add a

Re: [Wireshark-dev] packet-rlc.c changes

2012-08-03 Thread Joerg Mayer
Hello, On Fri, Aug 03, 2012 at 09:56:40AM +0200, Rishie Sharma wrote: Remove a created-but-unused subtree (and its ett). It's not obvious to me whether this tree was going to be used for something or not. I was going to add a subtree so you can filter on the values easily (instead of just

Re: [Wireshark-dev] packet-rlc.c changes

2012-08-03 Thread Pascal Quantin
Hi Rishie, 2012/8/3 Rishie Sharma storfiske...@gmail.com Hi! I am the one who (through Anders Broman) made changes to RLC. I subscribed to the list today to comment on some of the changes. Remove a created-but-unused subtree (and its ett). It's not obvious to me whether this tree was

Re: [Wireshark-dev] packet-rlc.c changes

2012-08-03 Thread Pascal Quantin
Le 3 août 2012 à 12:34, Pascal Quantin pascal.quan...@gmail.com a écrit : Hi Rishie, 2012/8/3 Rishie Sharma storfiske...@gmail.com Hi! I am the one who (through Anders Broman) made changes to RLC. I subscribed to the list today to comment on some of the changes. Remove a created-but-unused

[Wireshark-dev] Internal datastructures for SHB and IDB when converting pcap files to pcapng files

2012-08-03 Thread Anders Broman
Hi, I'm looking into a problem of merging files with different WTAP_ENCAP written in libpcap format ( WTAP_ENCAP_ETHERNET and WTAP_ENCAP_RAW_IP), It should be doable if the out file is in pcapng format but then I need create fake IDBs which we also do in wtap_dump_init_dumper(). Now I think it

Re: [Wireshark-dev] packet-rlc.c changes

2012-08-03 Thread Martin Mathieson
On Fri, Aug 3, 2012 at 9:55 AM, Pascal Quantin pascal.quan...@gmail.comwrote: Le 3 août 2012 à 12:34, Pascal Quantin pascal.quan...@gmail.com a écrit : Hi Rishie, 2012/8/3 Rishie Sharma storfiske...@gmail.com Hi! I am the one who (through Anders Broman) made changes to RLC. I subscribed

[Wireshark-dev] Dissector - How to add a new row to display next message payload in next row

2012-08-03 Thread Joe Leong
In the Developer's Guide, 9.4.2 How to reassemble split TCP Packets mentions You also cannot assume that a TCP packet contains only one application layer message and that the message header is at the start of your TCP payload. More than one messages can be transmitted in one TCP packet, so that

Re: [Wireshark-dev] packet-rlc.c changes

2012-08-03 Thread Christopher Maynard
Martin Mathieson martin.r.mathieson@... writes: Martin Mathieson might have some dct2000 captures so as to check that everything is still working as expected. I do not have any myself, so we will have to rely on someone else to confirm that it is still working as expected ;) Yes I'm not

Re: [Wireshark-dev] packet-rlc.c changes

2012-08-03 Thread Pascal Quantin
Le 3 août 2012 à 17:25, Christopher Maynard christopher.mayn...@gtech.com a écrit : Martin Mathieson martin.r.mathieson@... writes: Martin Mathieson might have some dct2000 captures so as to check that everything is still working as expected. I do not have any myself, so we will have to

[Wireshark-dev] Tshark usage in replaying icmpv6 messages

2012-08-03 Thread naresh gudipudi
Hi, I am using Tshark(version 1.2.11). I am replaying the pcap files and writing some fields of various headers to a text file. I am able to write the fields of all headers except icmpv6. Nothing is being written if i specify icmpv6 fields. Is this a bug? Is it modified in newer versions?

Re: [Wireshark-dev] Tshark usage in replaying icmpv6 messages

2012-08-03 Thread Guy Harris
On Aug 3, 2012, at 11:32 AM, naresh gudipudi wrote: I am using Tshark(version 1.2.11). That's a very old version; we are no longer making bug-fix updates for Wireshark 1.2.x, so there may be limits on how much help we can provide. I am replaying the pcap files What do you mean by

Re: [Wireshark-dev] Tshark usage in replaying icmpv6 messages

2012-08-03 Thread naresh gudipudi
Yes, it is reading, not replaying.My mistake. I am specifying the fields with -e option. for example, the Target Address field(in icmpv6 header) in icmpv6 neighbor solicitaion message(icmpv6 type = 135) sent to solicited-node multicast address, i am specifying the filter as

Re: [Wireshark-dev] Tshark usage in replaying icmpv6 messages

2012-08-03 Thread Guy Harris
On Aug 3, 2012, at 12:39 PM, naresh gudipudi wrote: Yes, it is reading, not replaying.My mistake. I am specifying the fields with -e option. for example, the Target Address field(in icmpv6 header) in icmpv6 neighbor solicitaion message(icmpv6 type = 135) sent to solicited-node multicast

[Wireshark-dev] Compile error for qtshark

2012-08-03 Thread Joerg Mayer
lib/libqtui.a(interface_tree.cpp.o): In function `SparkLineDelegate': /home/jmayer/work/wireshark/svn/trunk/ui/qt/sparkline_delegate.h:10: undefined reference to `vtable for SparkLineDelegate' -- Joerg Mayer jma...@loplof.de We are stuck with technology