Re: [Wireshark-dev] Reordering capture files

2012-09-19 Thread Martin Mathieson
I have something working for me now. If will probably be a couple of weeks before I have time to do much more with it, so posting it now in case anyone finds it useful or wants to improve it. It has only been tested with IxCatapult log files so far, but hopefully it will work with any

Re: [Wireshark-dev] gsm decode flow

2012-09-19 Thread Pascal Quantin
2012/9/19 pingu kool gsmandv...@gmail.com hi list, I want to understand the source flow of gsm dissector, I tried to search in, but got confused regarding actual flow happening at the time of dissection, can anybody help me in this. Thanks in advance.. Hi, assuming you are talking

[Wireshark-dev] r45005: changes in proto_item_append_string()

2012-09-19 Thread Jakub Zawadzki
Hi, I'm looking for r45005 changes and it seems than new proto_item_append_string() works different than previously. Old code was changing value of field [both for text and filter], new version changes only text (so it do the same as proto_item_append_text()) What's the reason of this change?

Re: [Wireshark-dev] r45005: changes in proto_item_append_string()

2012-09-19 Thread Martin Mathieson
Hi, Sorry about that. I had no idea that the old function could change the value behind a filter - should have been more careful (especially when I noticed that packet-frame.c was also using it...). Maybe I could create and use a new function such as proto_item_append_literal_text() I will be

[Wireshark-dev] tcpdump mailing lists

2012-09-19 Thread Markiewicz, Patrick F (N-APPLIED POLYMORPHISM, LLC)
Hi, This may seem like an odd request. I had tried to subscribe to the tcpdump mailing lists yesterday, but I'm receiving information that our mailserver is still having difficulty sending the subscription out. I saw in the wireshark-dev archives references to problems with the tcpdump

[Wireshark-dev] Debian package on 1.8.0

2012-09-19 Thread Benjamin Soriano
Hi! I have to generate debian package with some home-made plugins. Problem is I must provide this packages in 1.8.0 version. I notice two bugs. First one is noticed and fixed here : https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7406 Second one here :

Re: [Wireshark-dev] r45005: changes in proto_item_append_string()

2012-09-19 Thread Martin Mathieson
Reverted now. On Wed, Sep 19, 2012 at 9:34 AM, Martin Mathieson martin.r.mathie...@googlemail.com wrote: Hi, Sorry about that. I had no idea that the old function could change the value behind a filter - should have been more careful (especially when I noticed that packet-frame.c was also

Re: [Wireshark-dev] GUI functionality from plugins

2012-09-19 Thread Luis EG Ontanon
Actually, funnel.h implements some GUI functionality that can be used by plugins. More functionality can be added to it. On Wed, Sep 19, 2012 at 9:34 AM, David Ameiss netsh...@ameissnet.com wrote: Summary: I'd like to propose implementing a method of making GUI functionality more accessible

Re: [Wireshark-dev] GUI functionality from plugins

2012-09-19 Thread David Ameiss
And we currently use it (as noted below) to add menu items. For us, the critical item is cfile, to allow re-tapping captures. I suppose the email subject was misleading. Yes, more GUI functionality would be wonderful. But cfile is really the issue for us (at least for now). On 09/19/2012

Re: [Wireshark-dev] GUI functionality from plugins

2012-09-19 Thread Tony Trinh
On Wed, Sep 19, 2012 at 2:22 PM, David Ameiss netsh...@ameissnet.com wrote: For us, the critical item is cfile, to allow re-tapping captures. That sounds like the job of retap_packets [1]. Does that not work for you? [1]

Re: [Wireshark-dev] GUI functionality from plugins

2012-09-19 Thread David Ameiss
I missed that. I'll check it out. It seems (from a cursory look at the code) that the retap happens upon selecting the menu item. Currently I have a dialog that allows selection of all packets, or those currently displayed. But splitting that into 2 menu items shouldn't be a problem. Thanks -

Re: [Wireshark-dev] GUI functionality from plugins

2012-09-19 Thread David Ameiss
I can make this work. However, the graph_analysis_*() functions are not accessible under Windows (at least from a plugin) as they are not exported from the wireshark executable - so I think I'm back to the same problem. Unless, of course, there is yet another hook that I've managed to

Re: [Wireshark-dev] Debian package on 1.8.0

2012-09-19 Thread Jaap Keuter
Hi, From the bug comments this seems to depend more on what you have installed during the build, rather than a bugfix, which is not yet listed for this bug. Thanks, Jaap On 09/19/2012 04:36 PM, Benjamin Soriano wrote: Hi! I have to generate debian package with some home-made plugins.

Re: [Wireshark-dev] Debian package on 1.8.0

2012-09-19 Thread Benjamin Soriano
Hi, Yeah, it seems if Wireshark packages are already installed it can lead to some problems. I obviously remove them from my system. And as I say, this problem did not occur with a more recent version - on the same system. Thanks you for your time! Benjamin Soriano On 19/09/2012 23:55,

[Wireshark-dev] CORE DUMP ISSUE

2012-09-19 Thread Kumar, Chandan (Chandan)
Can any one help me to stop the core file creation on linux machine? I am running Wireshark-1.6.2 on Linux platform during packet testing lot number of .core file has been creating. So can any one say what I have to do to stop the core file creation? Thanks Chandan ~~~