[Wireshark-dev] Win64 programming

2009-04-16 Thread Jaap Keuter
Hi Gerald, Since you're deeply involved in the changes to make Win64 build it might be a good idea to put your insights into coding rules in README.developer, so that we mere mortals can get a clue how to keep writing portable code. Thanx, Jaap

Re: [Wireshark-dev] New dissector: packet-genisys.c

2009-04-16 Thread Jaap Keuter
Hi Bruce, Have a look at http://wiki.wireshark.org/SendingFilesToWireshark, specifically the section on source code. We request patches to be filed as bugs, as to prevent it from getting forgotten in the mailing list and be able to track further development on it. So, please open an

Re: [Wireshark-dev] T.38 codec problem!!!

2009-04-15 Thread Jaap Keuter
Hi, Go to preferences for RTP and change Treat RTP version 0 packets into T.38 packets. That might help, Jaap Deka Sanjeeb Kumar-KHBJ46 wrote: Hi All, I was trying to send FAX over IP network. I enabled G729 and t.38 codec on both endpoints. While checking the Wireshark trace of the

Re: [Wireshark-dev] Hearing g711 and g729 calls in WireShark VoIP call Player

2009-04-15 Thread Jaap Keuter
Hi, G.729 is a licensed codec, hence cannot be included in Wireshark without cost. Check the Wiki how to add it yourself, if you wish. Thanx, Jaap Brian Daniel wrote: Someone has done great work and I can hear G711 calls but can not hear G729 calls. I’m running

Re: [Wireshark-dev] [ACL][firewall] how to

2009-04-14 Thread Jaap Keuter
Hi, How do you imagine 'apply' from a user application like Wireshark? What kind of interface should it communicate through to the firewall? Firewall is a generic term, there are hundreds of types, which one do you target? Thanx, Jaap Sent from my iPhone On 14 apr 2009, at 11:46, Mihai

[Wireshark-dev] Debian Bug report logs - #520318, RFH: wireshark -- network traffic analyzer

2009-04-08 Thread Jaap Keuter
Hi DD, You might want to have a look at this bug and contact Joost to help out now that 1.2.0 is around the corner. Thanx, Jaap ___ Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org Archives:

Re: [Wireshark-dev] How to turn off optimization while compiling Wireshark on linux?

2009-04-07 Thread Jaap Keuter
Hi, I set my working path first, then start up ddd through libtool. Just my $0.02, Jaap siri m wrote: Actually, even the CFLAGS is also set to -g -O0. For eg: If I use the libtool --mode=execute ddd $HOME/wireshark-0.99.7/wireshark and I open the packet-tipc.c (an existing dissector), it

Re: [Wireshark-dev] Protocol Col / Info col error

2009-03-31 Thread Jaap Keuter
Hi, Most likely you hide setting of column values in a 'if (tree)' conditional. That doesn't work. Thanx, Jaap vinayak kamath wrote: Hi, I am using wireshark 1.0.6 on RHEL 4 linux. ( Built from source code)... I have added by own dissector . I am able to decode the messages correctly. But

Re: [Wireshark-dev] dll compatibility between 1.1.3/4 and 1.0.6

2009-03-30 Thread Jaap Keuter
Hi, Even though it *may* appear to work, there is no guarantee that it doesn't fail in subtle ways. So don't come whining when it doesn't work. That is all. Thanx, Jaap wsgd wrote: Ok, there is absolutely no warranty, but it could work. I have a C++ plugin generated on 1.0.3, Visual C++

Re: [Wireshark-dev] convert a hexa form to pcap

2009-03-12 Thread Jaap Keuter
Hi, Better talk on the user mailing list. https://www.wireshark.org/mailman/listinfo/wireshark-users Thanx, Jaap SOLTANI FATEN wrote: Hi I'm a new Wireshark user, and I'm asking if it's possible to decode a not pcap files (text files) by Wireshark. In the same time I'm thinking about

Re: [Wireshark-dev] Directory descriptor leak

2009-03-11 Thread Jaap Keuter
Hi, Good catch. Committed r27691. Please note that patches get lost easily in the mailing list. Therefore we changed policy to have patches submitted in our bugzilla at bugs.wireshark.org. Thanx, Jaap Jakub Zawadzki wrote: Hi, Very small patch, found using valgrind.

[Wireshark-dev] GeoIP information presentation

2009-03-08 Thread Jaap Keuter
Hi list, Currently the GeoIP information is an alternating list of source and destination paramters, like so: [Source GeoIP Country: China] [Destination GeoIP Country: Japan] [Source GeoIP City: Tokyo, 40] [Destination GeoIP City: Tokyo, 40] [Source GeoIP AS Number:

Re: [Wireshark-dev] GeoIP information presentation

2009-03-08 Thread Jaap Keuter
Hi, It's done in revision 27655. Thanx, Jaap Ulf Lamping wrote: Jaap Keuter schrieb: Hi list, Currently the GeoIP information is an alternating list of source and destination paramters, like so: [Source GeoIP Country: China] [Destination GeoIP Country: Japan] [Source

Re: [Wireshark-dev] Compile dissectors for OS-X

2009-02-28 Thread Jaap Keuter
Hi, You might be helped with ./configure --without-wireshark (from the top of my head). That removes the dependabcy of GTK, but configures the build of tshark, hence the dissector. Thanx, Jaap Sent from my iPhone On 28 feb 2009, at 08:07, Stephen Fisher st...@stephen-fisher.com wrote:

Re: [Wireshark-dev] RTPS RTPS2 packet dissectors

2009-02-27 Thread Jaap Keuter
Hi Fabrizio, The new dissectors are already in the right place. You'll have to understand that once Wireshark 1.0 went out the door it is considered stable. That means no new or changed features, just bug fixes go in. All new development, new features etc go into the development tree (where

Re: [Wireshark-dev] [Wireshark-commits] rev 27500: /trunk/ /trunk/epan/dissectors/: Makefile.common packet-opsi.c packet-opsi.h /trunk/packaging/nsis/: Makefile.nmake wireshark.nsi /trunk/plugins/: Ma

2009-02-25 Thread Jaap Keuter
Hi, Gryphon is now the example used. Also referred in README.plugins Thanx, Jaap Sent from my iPhone On 25 feb 2009, at 17:16, Joerg Mayer jma...@loplof.de wrote: On Sun, Feb 22, 2009 at 01:38:29PM +0100, Jaap Keuter wrote: It is of little use to keep single file dissectors as plugins. Also

Re: [Wireshark-dev] Can some minor enhancements be moved to the 1.0 trunk ?

2009-02-24 Thread Jaap Keuter
Hi Michael, I'm sorry but you need to understand that a stable release is a stable release. No new features, enhancements or the like go in. Only bugfixes are backported from development to the 1.0 branch. It all comes down to the allocation of the 'spare time' resource, something we're

Re: [Wireshark-dev] New member

2009-02-23 Thread Jaap Keuter
Hi Remy, Welcome to the Wireshark community. I'm not sure I understand your development goal, but enjoy the work. Thanx, Jaap Sent from my iPhone On 23 feb 2009, at 16:01, POINTEAU Remy remy.point...@tech.viveris.com wrote: Hi ! I'm a new member of the mailinglist of Wireshark. I

Re: [Wireshark-dev] FW: ASN.1 .cnf File Documentation

2009-02-23 Thread Jaap Keuter
Hi, There is some on the wiki (http://wiki.wireshark.org/Asn2wrsAuxiliary), but it's not abundant. Thanx, Jaap Behdad Forghani wrote: Hello, Is there a document on the format.cnf files used by asn2wrs program? Thanks, Behdad

[Wireshark-dev] What about the static build?

2009-02-21 Thread Jaap Keuter
Hi, I've been trying out the static build (you know, the one with configure --enable-static) of trunk for a while now, but got nowhere near a complete build. Even though I have had to disable various options (like --without-wireshark, due to audio related library problems, and --without-krb5)

Re: [Wireshark-dev] Help - Peculiar behavior with DLLs

2009-02-19 Thread Jaap Keuter
Hi, I never said they couldn't be loaded, I said: there is a guarantee that it will fail unpredictably sometime. These failures can be subtle, like incorrect decoding, missing information, wrong column information. Stuff like this has happened and causes great confusion, because it isn't

Re: [Wireshark-dev] Help - Peculiar behavior with DLLs

2009-02-16 Thread Jaap Keuter
Hi, Plugins aren't portable across versions. They may seem to work, but there is no guarantee (there is a guarantee that it will fail unpredictably sometime). See http://wiki.wireshark.org/KnownBugs Thanx, Jaap Blazer, Doron wrote: Hi, I have been developing under the latest development

Re: [Wireshark-dev] It takes forever to compile Wireshark on my box

2009-02-15 Thread Jaap Keuter
Hi, If you think it's related to your specific dissector you could make it into a plugin (see doc/README.plugin). That way you can more easily compile just your dissector, and compare compile time. Thanx, Jaap mirta...@cs.ubc.ca wrote: Hi, I am a newbie!!! I have installed wireshark on a

Re: [Wireshark-dev] Adding numbers to the tree

2009-02-13 Thread Jaap Keuter
Hi, Look in doc/README.developer and epan/proto.h for proto_tree_add_uint[_format](tree, ...) Thanx, Jaap gogr...@wi.rr.com wrote: Hello, In my custom dissector i understand how to take data from the buffer and output it, but how do i output a number thats not from the buffer. I will be

Re: [Wireshark-dev] wireshark web site

2009-02-09 Thread Jaap Keuter
Hi, Indeed, it should be cleaned up. Thanx, Jaap Andrew Hood schreef: Jaap Keuter wrote: HI, Indeed it's new. Still, no problems on Iceweasel 3.0.5, Firefox 3.0.6 (WinXP) or Exploder (WinXP). Cache flush maybe? Cache flush clears it, but the page still has 44 syntax errors

Re: [Wireshark-dev] Wireshark monitoring in the enterprise environment

2009-02-08 Thread Jaap Keuter
Hi, If there's any list for it, it's wireshark-users, not wireshark-dev. Thanx, Jaap Martin Sustrik wrote: Hi all, I've written an article about monitoring business data, things like invoices or stock quotes, using Wireshark: http://www.zeromq.org/code:traffic-monitoring If there's

Re: [Wireshark-dev] Issue loading a new plugin

2009-02-02 Thread Jaap Keuter
Hi, Since this comes up more and more often is someone able to: 1. Write a patch for the plugin makefiles, or 2. Write a chapter in the developer manual, or 3. Write something on an apropriate Wiki page. This in order of preference. Thanx, Jaap Sent from my iPhone On 2 feb 2009, at 14:55,

Re: [Wireshark-dev] Issue loading a new plugin

2009-02-02 Thread Jaap Keuter
Hi, Writing a patch and commit, even better. This should cover this issue once and for all (I hope). Thanx, Jaap Ulf Lamping wrote: Jaap Keuter schrieb: Hi, Since this comes up more and more often is someone able to: 1. Write a patch for the plugin makefiles, or 2. Write a chapter

Re: [Wireshark-dev] New toplevel Telephone menu item

2009-01-30 Thread Jaap Keuter
Ulf Lamping wrote: Jaap Keuter schrieb: Hi, Well that was easy: grep 'everything with telephone icon' | xargs mv menu/Telephony ;) No, even easier: There was already a menu group telephony, I only needed to put this into a separate menu ;-) Simple and elegant, I like it. I'm oke

Re: [Wireshark-dev] New toplevel Telephone menu item

2009-01-28 Thread Jaap Keuter
Hi, Well that was easy: grep 'everything with telephone icon' | xargs mv menu/Telephony ;) I'm oke with this idea, but would suggest to call it 'Telecom' i.s.o. 'Telephony', because it entails more than plain telephony. Also now the telephone icon has lost its meaning (they all have it, of

Re: [Wireshark-dev] Scaled integer fields in a protocol, can use proto_tree_add_item??

2009-01-24 Thread Jaap Keuter
Hi, You're looking for proto_tree_add_uint_format_value(tree, id, tvb, start,length, value, format, ...); It add the field, you format the way the value is presented. Have a look at doc/README.developer for the details. Thanx, Jaap John Jamulla wrote: Hi, In my protocol I have many

Re: [Wireshark-dev] Desperate question on a Windows based wireshark setup

2009-01-22 Thread Jaap Keuter
Hi, First of all the is the developer mailing list for Wireshark. This question seems to do with the networking for which Wireshark could be used. Therefore posting in wireshark-users might give to a better chance of an informed reponse, although the developers know a thing or two as well about

[Wireshark-dev] Changing the column setting API

2009-01-20 Thread Jaap Keuter
Hi, In the course of fixing bug 2902 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2902) a proposal was made to change the API of the column setting functions. Currently the user (dissector code) has to check the column before accessing it. So a lot of code looks like this: if

Re: [Wireshark-dev] Bug#3153

2009-01-15 Thread Jaap Keuter
Hi, I took some time of my evening and have them lined up in my working copy. Do you have some sample capture file I can use to testdrive this code? Thanx, Jaap Matthew Parris wrote: Is anyone looking at this patch? https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3153 -Matt

Re: [Wireshark-dev] use else instead of ifndef _WIN32

2009-01-11 Thread Jaap Keuter
Committed revision 27212. Toralf Förster wrote: Hi, I'm wondering, why within dumpcap the ifdef _WIN32 is handle in 2 different ways within the same source file or - OTOH - should the patch below be applied ? : tfoer...@n22 ~/devel/wireshark $ svn diff --diff-cmd diff dumpcap.c

Re: [Wireshark-dev] PPPoED protocol preferences

2009-01-11 Thread Jaap Keuter
I can't reproduce that behavior with other boolean preferences of other dissectors. Does it happen to other dissector preferences as well? Can you provide a sample capture showing this? What is the platform specifications you see this on? What version of Wireshark are you running? Toralf

Re: [Wireshark-dev] [Wireshark-bugs] [Bug 3183] checkAPI.pl Makefile's rule only checks C files but there's Not terminated: value_string errors in .h too

2009-01-09 Thread Jaap Keuter
Hi, I think that it is more a matter of personal taste of the original author of these files. If we want this changed we need to define more stringent style guides _and_ enforce them. It takes enough effort to get it bug free. Thanx, Jaap Bill Meier wrote: bugzilla-dae...@wireshark.org

Re: [Wireshark-dev] range_string does not work?

2009-01-07 Thread Jaap Keuter
Hi, Is this the same as bug 2893? Stig, was this to be ported to stable? Thanx, Jaap On 7 jan 2009, at 13:41, Zhang, Long \(Roger\) zha...@alcatel-lucent.com wrote: Hi, I am based on Wireshark 1.0.0 on RHEL5 and Windows. Now I am suspecting the range_string does not work when it is

Re: [Wireshark-dev] Package issue under Windows XP

2009-01-07 Thread Jaap Keuter
Hi, You can review the changes here: http://anonsvn.wireshark.org/viewvc?view=revrevision=27186 Thanx, Jaap Sean wrote: Thanks, What's the difference in this patch? does this patch only modify several files? If so, I'd like to add patch to my 1.0.4 one, could you give me some information

Re: [Wireshark-dev] rev 26979: /trunk/ /trunk/: version_info.c

2008-12-28 Thread Jaap Keuter
Hi, Can you file a bugreport on that at https://bugs.wireshark.org ? Thanx, Jaap Kovarththanan Rajaratnam wrote: Hey, This changelist seems to break compilation on MSVC6: version_info.c version_info.c(410) : error C2039: 'wProductType' : is not a member of '_OSVERSI ONINFOEXW'

Re: [Wireshark-dev] About the wireshark problem

2008-12-26 Thread Jaap Keuter
Hi, Two remarks: You should not login as root when compiling programs. Did you autogen.sh and/or configure before running make? Thanx, Jaap Sent from my iPhone On 25 dec 2008, at 09:07, Tseng Shuo tsengs...@gmail.com wrote: Hi, I have problem about the compile wireshark problem. I use

Re: [Wireshark-dev] RFE: multiple simultaneous files

2008-12-23 Thread Jaap Keuter
Hi, The MDI interface was discussed at SharkFest'08 is deemed a long distance goal. Currently the dissector engine model doesn't support it very well, so this obstacle has to be cleared before MDI comes into view. Thanx, Jaap Phillip Heller wrote: Hello there, Just wanted to request

Re: [Wireshark-dev] How does the wireshark identify the corresponding protocol according to the data from libcap

2008-12-22 Thread Jaap Keuter
Hi, You could start by reading part II of the developer guide http://www.wireshark.org/docs/wsdg_html_chunked/PartDevelopment.html even though that is not complete. It does however touch on the questions you ask. Thanx, Jaap Yuming fang wrote: Hi, all, I am adding a new protocol to

Re: [Wireshark-dev] Problem in adding another dissector under a added one

2008-12-18 Thread Jaap Keuter
Hi, How did you add foo1 to UDP? Research how UDP allows that, and you know how to allow foo2 to add under foo1 Thanx, Jaap Siva.S wrote: Hi, I'm new to this wireshark. I added one dissector under UDP. I want to add another one under this. for eg. take I've added foo1 protocol

Re: [Wireshark-dev] Wireshark licence terms and dissectors

2008-12-18 Thread Jaap Keuter
Hi, I think http://www.wireshark.org/faq.html#q1.9 basically covers it. But maybe the title could be better. Thanx, Jaap Rob Meades wrote: Hokay, so a dissector links with GPL code and must therefore be provided as source. Might be worth adding this as a note to the FAQ, whoever controls

Re: [Wireshark-dev] Wireshark licence terms and dissectors

2008-12-18 Thread Jaap Keuter
...@wireshark.org [mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Jaap Keuter Sent: 18 December 2008 16:36 To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Wireshark licence terms and dissectors Hi, I think http://www.wireshark.org/faq.html#q1.9 basically covers

Re: [Wireshark-dev] [Wireshark-bugs] [Bug 3138] New: Buildbot crash output: fuzz-2008-12-18-2313.pcap

2008-12-18 Thread Jaap Keuter
Hi, ... and if indeed it needs to be removed the documentation (README.developer) must be adapted as well on this API change. Thanx, Jaap Guy Harris wrote: On Dec 18, 2008, at 1:03 PM, Martin Mathieson wrote: Sorry about that, I didn't grep to see if it was being called. Because it

Re: [Wireshark-dev] Problem: dont see packets

2008-12-17 Thread Jaap Keuter
Hi, You could consult http://wiki.wireshark.org/CaptureSetup Thanx, Jaap yonatan kahanol wrote: I choose a adapter with my WireShark but, when i click start i wait 2days and dont see, even 3, and no packet sniffed. 0. I dont see nothing... what can i do ? --

Re: [Wireshark-dev] Buildbot CSS

2008-12-17 Thread Jaap Keuter
Hi, This should do the trick: http://buildbot.wireshark.org/buildbot.css Thanx, Jaap Max Teo wrote: Hi, I have setup a Buildbot too! But I found the CSS styling plain too boring. Came across this one and saw that it was fantastic. Nice structured colors. I was wondering can you

Re: [Wireshark-dev] Fragment issue

2008-12-14 Thread Jaap Keuter
Hi, Hou light ben using the fragment_add_check function incorrectly. msg_fragid doesn't seem to match frag_offset from the prototype. Thanx, Jaap Sent from my iPhone On 15 dec 2008, at 06:31, Sean yun...@yahoo.com wrote: Hi, I meet a problem when use fragmentation feature, there is a

Re: [Wireshark-dev] Wireshark 1.0.5 is now available

2008-12-11 Thread Jaap Keuter
Hi Gerald, Yes it does. We might need to put up on the Wiki or so a things to do before we can call this release ready list. The items you listed can be on there as well as trying to find volunteers to work on the update of the user manual. Stuff like that. Thanx, Jaap Gerald Combs wrote:

Re: [Wireshark-dev] How to remove the {Malformed Packet] warning message

2008-12-10 Thread Jaap Keuter
Hi, Just make sure you don't read more bytes from the tvb than that are in their. You should have some measure from the protocol fields themselves, or use tvb_length_remaining() Thanx, Jaap Sent from my iPhone On 10 dec 2008, at 10:04, [EMAIL PROTECTED] wrote: Hi everyone, I wrote a

Re: [Wireshark-dev] please in Hungarien

2008-12-09 Thread Jaap Keuter
Hi, See http://wiki.wireshark.org/Development/Translations Thanx, Jaap Ra¡bai Viktor wrote: Hi, my name is Viktor RABAI from Hungary. I'm really interested in the usage of the program which is called wireshark and developed by you - if my infomation are correct. I want to translate it

[Wireshark-dev] [Fwd: Re: [Wireshark-commits] rev 26904: /trunk/plugins/unistim/ /trunk/plugins/unistim/: packet-unistim.c]

2008-12-04 Thread Jaap Keuter
wireshark-dev@wireshark.org References: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] On Thu, Dec 04, 2008 at 12:20:25AM +0100, Jaap Keuter wrote: Care to comment on this one? Frankly I'm getting tired of going back and forth with this thing. Can't we sort it out once and for all

Re: [Wireshark-dev] Bits Dissect Issue

2008-12-04 Thread Jaap Keuter
Hi, Would proto_tree_add_bits_item() do the trick? Thanx, Jaap Sean wrote: Hi, I want to dissect a packet, each field of this packet is not byte aligned, and the bits mask position of each field is not fixed. The position is determined by some bits in the content. For example, the

Re: [Wireshark-dev] [Wireshark-commits] rev 26904: /trunk/plugins/unistim/ /trunk/plugins/unistim/: packet-unistim.c

2008-12-03 Thread Jaap Keuter
Don, Care to comment on this one? Frankly I'm getting tired of going back and forth with this thing. Can't we sort it out once and for all? Thanx, Jaap On 3 dec 2008, at 22:35, Bill Meier [EMAIL PROTECTED] wrote: Log: From Don Newton: Set default port of Unistim back to 5000; The Unistim

Re: [Wireshark-dev] How to share enhanced plugin

2008-12-02 Thread Jaap Keuter
Hi, I always wondered why this isn't included in the Windows build scripts. Can anyone shed some light on that? Thanx, Jaap Martin Lutz wrote: Hi Rajith, this command should be entered in the after building your plugin from the directory your plugin resides. eg. cd

Re: [Wireshark-dev] How to share enhanced plugin

2008-12-02 Thread Jaap Keuter
, everyone will be helped. Thanx, Jaap PS: Welcome back :) Ulf Lamping wrote: Jaap Keuter schrieb: Hi, I always wondered why this isn't included in the Windows build scripts. Can anyone shed some light on that? Hi! Simply I got no trouble with it and noone else cared about

Re: [Wireshark-dev] About Wireshark Dissector Debug

2008-11-18 Thread Jaap Keuter
Hi, Here you go: http://wiki.wireshark.org/Development/Tips Thanx, Jaap Sean wrote: Hi, I'm working on a dissector and some problems happened, I'd like to check what happened in the dissector, Does Wireshark support debug methods similar as printf or other methods which can print out

Re: [Wireshark-dev] RTP Stream Analyses and dynamic payload clock rates

2008-11-16 Thread Jaap Keuter
Hi, You may have a point there. Would you open a bug for that in the Wireshark bug database (https://bugs.wireshark.org)? That way it won't be forgotten. Thanx, Jaap Michael Lum wrote: Hello, (Source is from 1.0.4) I was looking through tap-rtp-common.c because I wanted to add some

Re: [Wireshark-dev] Wireshark as a hex viewer?

2008-11-08 Thread Jaap Keuter
Hi, Try loading an MP3 file in Wireshark. Thanx, Jaap Sent from my iPhone On 8 nov 2008, at 13:56, yami [EMAIL PROTECTED] wrote: Hi All, I think Wireshark is a nice hex viewer as well as a packet analyzer, especially for those binary files which consist of several blocks, such as

Re: [Wireshark-dev] Branching Question

2008-11-06 Thread Jaap Keuter
Hi, The first one is more of an enhancement. Since the 1.0 branch is in 'feature freeze' this won't go in. It stays in trunk until a new stable branch is made. The second looks more like a bugfix to me, but maybe is dependant on the first. Thanx, Jaap Sent from my iPhone On 6 nov 2008,

Re: [Wireshark-dev] new gadu gadu protocol dissector

2008-11-02 Thread Jaap Keuter
Hi, It's best that you file a bugreport on https://bugs.wireshark.org attaching these files there. That way this won't get forgotten. Did you fuzztest this dissector? Read the patch submission guidelines in the developer section of the Wiki. Thanx, Jaap Artur Kołodziej wrote: Hi, Lukasz

Re: [Wireshark-dev] How to use or distribute my own plugin

2008-10-29 Thread Jaap Keuter
Hi, Have a look in the mailinglist archive. This has usually to with the involved runtime module. Thanx, Jaap Sent from my iPhone On 29 okt 2008, at 10:04, Ravi Palaniappan [EMAIL PROTECTED] wrote: Hi, I have created a plug-in for our internal use. It works fine with the

Re: [Wireshark-dev] GeoIP support added

2008-10-27 Thread Jaap Keuter
Hi, This seems to be in 1.1.2-SVN-26575. Thanx, Jaap Sent from my iPhone On 27 okt 2008, at 13:42, Tyson Key [EMAIL PROTECTED] wrote: Hi Gerald, sounds like a very cool and useful feature to have. Any idea about which SVN revision this is in? Thanks. On Mon, Oct 27, 2008 at 4:56 AM,

Re: [Wireshark-dev] GMP

2008-10-27 Thread Jaap Keuter
Hi Chris, Would that be large number arithmetic? Of which we do very little, if any. Or would that be large number presentation, which is usually a poor choice for displaying a byte array. Thanx, Jaap Maynard, Chris wrote: Recently I have been working on a project for the Windows platform

Re: [Wireshark-dev] What is ZRTP?

2008-10-26 Thread Jaap Keuter
HI, Well, this is what Phil has to say about it: http://zfoneproject.com/faq.html#zrtpacronym I don't know what else to call it than... ZRTP. But if you have a better suggestion, feel free. Thanx, Jaap Stephen Fisher wrote: This commit prompted me to wonder what ZRTP is... problem is, the

Re: [Wireshark-dev] what FT_Uint* if size is 128 bits

2008-10-24 Thread Jaap Keuter
Hi, There is no 128 bit fieldtype. What you can do is use FT_BYTES with length 16. Thanx, Jaap Sent from my iPhone On 24 okt 2008, at 10:01, manju ptm [EMAIL PROTECTED] wrote: Thanx for the previous reply it helped me and now i have an attribute whose size is 128 bits how to declare

Re: [Wireshark-dev] Adding dissector which has attribute value in bits

2008-10-23 Thread Jaap Keuter
Hi, Have a look at bitmask in section 1.6 of README.developer. Thanx, Jaap Sent from my iPhone On 23 okt 2008, at 10:13, manju ptm [EMAIL PROTECTED] wrote: Hi, can anyone help me in using proto_tree_add_item( ) where my attribute structure is like this K=1bit TLB=3bit which are not in

Re: [Wireshark-dev] what FT_ type should be used for bit type variable

2008-10-23 Thread Jaap Keuter
Hi, Use one of the FT_UINT* types and add a bitmask in the same header field. See README.developer and many of the dissectors in the source tree. Thanx, Jaap manju ptm wrote: Hi, Iam designing a dissector, if want to display a variable whose length is 3 bits, what FT_ type should be used

Re: [Wireshark-dev] runtime error using plugin with prefs_register_enum_preference

2008-10-22 Thread Jaap Keuter
Hi, You can't have a space or caps in the preference name. Thanx, Jaap Sent from my iPhone On 22 okt 2008, at 17:36, [EMAIL PROTECTED] wrote: Hi, I'm trying to add a list of protocol versions in the preferences menu using: plugin with prefs_register_enum_preference I've followed the

Re: [Wireshark-dev] Issue related to reassembly of packets

2008-10-22 Thread Jaap Keuter
Hi, See doc/README.developer section 2.7 Thanx, Jaap Gaurav1 Jain wrote: Hi All, Please help me out in my query related to reassembly of packets. Regards, Gaurav -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gaurav1 Jain Sent:

Re: [Wireshark-dev] WG: Wireshark 1.0.3

2008-10-21 Thread Jaap Keuter
: For wireshark 1.0.3, it is shown below... Thanks for all the help. Bye, Nobsi -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Jaap Keuter Gesendet: Dienstag, 21. Oktober 2008 00:14 An: Developer support list for Wireshark

Re: [Wireshark-dev] WG: Wireshark 1.0.3

2008-10-20 Thread Jaap Keuter
Hi, Were you running the GTK1 or GTK2 version of Wireshark 0.99.3a ? Thanx, Jaap Eder, Norbert wrote: Hello all Developers, I have a problem with wireshark 1.0.3. When I start this on a Solaris 10 Machine remotely, 160 000 Kbytes were downloaded to open the gui. At wireshark 0.99.3a,

Re: [Wireshark-dev] stdio.h/stdlib.h includes apparently not req'd in epan/dissector source files ....

2008-10-17 Thread Jaap Keuter
of the changes and see what happens, if there's a problem we can easily roll back. Regards Anders -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jaap Keuter Sent: den 17 oktober 2008 07:33 To: Developer support list for Wireshark Subject: Re: [Wireshark

Re: [Wireshark-dev] How to append two tvb buffers?

2008-10-16 Thread Jaap Keuter
Hi, Have a look at the tvb_composite_xxx() functions for that. Thanx, Jaap [EMAIL PROTECTED] wrote: Hi All, I am developing a new plugin in which it contains the tvb buffer in the following format xx yy xx zz xx qw …. But I need not consider xx values and would like to have yy zz

Re: [Wireshark-dev] stdio.h/stdlib.h includes apparently not req'd in epan/dissector source files ....

2008-10-16 Thread Jaap Keuter
Bill Meier wrote: Just for the record: My original reply to John follows (which I mistakenly sent only to John). John Sullivan wrote: Random *local* include files I would whole heartedly agree, but not system ones unless you have tested on every single current and historical

Re: [Wireshark-dev] Wireshark Portable Installer update

2008-10-16 Thread Jaap Keuter
Hi John, We've been using the bug database for that. File a report as enhancement and attach patches against the repository HEAD there. This way the changes won't get lost and can be worked on when time permits. Thanx, Jaap John T. Haller wrote: Greetings All, I'd like to assist with

Re: [Wireshark-dev] how can I add Filter name and filter string

2008-10-15 Thread Jaap Keuter
Hi, Add them to cfilter in root of your source tree. This will be used as basis for new files. If the user already has a modified file, it won't be added though. That's the users' filter set, not ours to modify. Thanx, Jaap Wasiq md wrote: Hi, I am new to this group and I have developed a

Re: [Wireshark-dev] No GPL license (and more) in GTK1 wireshark?

2008-10-15 Thread Jaap Keuter
Jeff Morriss wrote: Peter Fuller wrote: The last time I sent mail, I did not get a copy and ended up spamming the list thinking something was broken. I've noticed on GTK1-based builds that there are missing tabs under 'About-Wireshark'. The AUTHORS and the LICENSE tab are missing.

Re: [Wireshark-dev] how can I add Filter name and filter string

2008-10-15 Thread Jaap Keuter
Hi, Ehm, cfilter is a file in the source tree. No code involved. Thanx, Jaap Wasiq md wrote: Thanks for the response. Could you point me to the sample code in the wireshark code base thats doing this? On Wed, Oct 15, 2008 at 4:38 PM, Jaap Keuter [EMAIL PROTECTED] mailto

Re: [Wireshark-dev] ASN.1 spec for kerberos?

2008-10-15 Thread Jaap Keuter
Hi, The current state of the kerberos ASN1 source breaks the buildbot build. The distcheck fails on the creation of Makefile. So either kerberos is in or out, please make it so that the distcheck succeeds. Thanx, Jaap Anders Broman wrote: Hi, I'll chek in an update so don't tear into it just

Re: [Wireshark-dev] IEC 61850 GOOSE Dissector

2008-10-13 Thread Jaap Keuter
Hi, Yeah, what Anders said. And please, file a bugreport to attach these files to, so that they won't be forgotten in the mailing list archives. See http://wiki.wireshark.org/SendingFilesToWireshark under Source Code. Thanx, Jaap Anders Broman wrote: Hi, Could you provide a sample capture

Re: [Wireshark-dev] dropped packets stats for dumpcap/tshark ring buffer mode

2008-10-09 Thread Jaap Keuter
Hi, Thinking about this makes me wonder if this is sufficient. When 36 ethernet ports can cause packet drops on the capture interface then probably the monitor port will be dropping packets too. How are you going to account for that? Thanks, Jaap Filonenko Alexander-AAF013 wrote: Using

Re: [Wireshark-dev] dropped packets stats for dumpcap/tshark ring buffer mode

2008-10-09 Thread Jaap Keuter
to work with tshark). Any other approaches? Thanks, Alex -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jaap Keuter Sent: Thursday, October 09, 2008 1:43 AM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] dropped

Re: [Wireshark-dev] [Wireshark-commits] rev 26377: /trunk/epan/dissectors//trunk/epan/dissectors/: ncp2222.py

2008-10-08 Thread Jaap Keuter
Hi, A clear comment line explaining the hack may help here... Thanx, Jaap Greg Morris wrote: Stig, Well that white space was there on purpose... { 15, Read Class Definition }, It is there because the packet-ncp.inc when it processes the NDS verb echos the string value to

Re: [Wireshark-dev] Problems to Update GTK2/Glib in 1.0.4

2008-10-07 Thread Jaap Keuter
Jeff Morriss wrote: Gerald Combs wrote: Anders Broman wrote: Hi, Couldn't glib for gtk1 and gtk2 be separated. Would something like this work? Or isn't it worth the effort? The only thing keeping GTK1 around was the need for 256-color mode support. If we update GTK2 in /trunk-1.0,

Re: [Wireshark-dev] New dissector for AYIYA

2008-10-05 Thread Jaap Keuter
Hi, Good that you check the list for it, because Jelmer Vernooij beat you to the punch. His dissector was committed a few days ago and available in the development build. See https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2898 and

[Wireshark-dev] Should tvb always be != NULL

2008-10-03 Thread Jaap Keuter
Hi list, Bug 2934 brings to light an interesting question: Should proto_tree_add_??? always have a valid tvb? Sounds logical for every call that adds a value, but not so much for _add_text(). The bug states that there are dissectors which make that call without a tvb, and this leads to a

Re: [Wireshark-dev] fetching numbers 8 bits (functions not in libwireshark.def and not available for plugins)

2008-09-26 Thread Jaap Keuter
Hi, Have a look here http://www.wireshark.org/docs/wsdg_html/#ChSrcSend Furthermore, watch out with statements like as long as a lower svn version has the functions available in libwireshark.def ... the compiled plugin dll will work correctly on anyone's release of that version or above. This

Re: [Wireshark-dev] [PATCH] Socks GSSAPI support

2008-09-24 Thread Jaap Keuter
Hallo Jelmer, Zou je deze patch in bugzilla willen toevoegen? Zodoende sneeuwt ie niet onder in het mail archief. For our international audience: Please use bugzilla for patch submissions. Bedankt/Thanx, Jaap Jelmer Vernooij wrote: The attached patch adds support for dissecting GSSAPI

Re: [Wireshark-dev] wireshark multi-platform setup memos

2008-09-23 Thread Jaap Keuter
Hi, These are nice articles. There's one big problem though: root access. http://blog.csdn.net/vastsmile/archive/2008/05/04/2387266.aspx You state that you need root access to build and run Wireshark. That is untrue and potentially dangerous. First of all leave it out of the build, so: ...

Re: [Wireshark-dev] v.150.1 support?

2008-09-23 Thread Jaap Keuter
Hi, I'm not aware of any developments in this area, apart from ZRTP and SRTP. Please feel free to contribute patches, you can add them to bugzilla so they won't get lost. Thanx, Jaap Adcock, Jamison wrote: Hi, I was wondering if anyone out there has been working on adding

Re: [Wireshark-dev] Conversation tracking and endpoint contexts between layers

2008-09-09 Thread Jaap Keuter
Hi, This is an interesting problem. It's origin is found in the man-in-the-middle nature of Wireshark, for which it needs an overall view over the protocol layers for some of the more advanced features. If you look at epan/packet-info.h you can see that several protocols have specific fields

[Wireshark-dev] Good day

2008-09-08 Thread jaap . keuter
Mail transaction failed. Partial message is available. [Filename: document.zip, Content-Type: application/octet-stream] Policy violated (Rainbow eManager): Attachment Removal The attachment file in the message has been removed by Rainbow eManager. ___

Re: [Wireshark-dev] packet-ieee802154.c compilation error

2008-09-03 Thread Jaap Keuter
Hello Guy, Thanks for the extensive analysis of this issue. You come to the same conclusion as I. ^ is converted into/handled as ~ which is not the same in this case. I'll see if I can create a test program showing this issue to file with the report. Thanx, Jaap Guy Harris wrote: On Sep

[Wireshark-dev] packet-ieee802154.c compilation error

2008-09-02 Thread Jaap Keuter
Hi list, I'm running into this error for which I do not know the proper solution: cc1: warnings being treated as errors packet-ieee802154.c: In function ‘dissect_ieee802154_common’: packet-ieee802154.c:709: error: comparison of promoted ~unsigned with unsigned make[4]: ***

Re: [Wireshark-dev] packet-ieee802154.c compilation error

2008-09-02 Thread Jaap Keuter
] [mailto:wireshark-dev- [EMAIL PROTECTED] On Behalf Of Jaap Keuter Sent: Tuesday, September 02, 2008 4:18 PM To: Developer support list for Wireshark Subject: [Wireshark-dev] packet-ieee802154.c compilation error Hi list, I'm running into this error for which I do not know the proper solution

Re: [Wireshark-dev] packet-ieee802154.c compilation error

2008-09-02 Thread Jaap Keuter
- From: [EMAIL PROTECTED] [mailto:wireshark-dev- [EMAIL PROTECTED] On Behalf Of Jaap Keuter Sent: Tuesday, September 02, 2008 5:23 PM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] packet-ieee802154.c compilation error Hi Chris, Yes, that is the one

Re: [Wireshark-dev] packet-ieee802154.c compilation error

2008-09-02 Thread Jaap Keuter
Hi Didier, Tried it just now, but sorry, still the same error. Thanx, Jaap didier wrote: Le mardi 02 septembre 2008 à 17:28 -0400, Maynard, Chris a écrit : What about modifying the macro itself? #define ieee802154_crc_tvb(tvb, offset) ((guint16)(crc16_ccitt_tvb_seed(tvb, offset,

<    4   5   6   7   8   9   10   11   12   13   >