Re: [Wireshark-dev] Patch for bug 310

2007-02-18 Thread Ulf Lamping
Steve Schaeffer wrote: This patch fixes the issue of adding list widget numbers to the packet history instead of adding frame numbers. No it doesn't! After applying the display filter, the history is completely empty now. Did you even tried that patch yourself under the situation described

Re: [Wireshark-dev] Patch to decode ERF type 5 record

2007-02-18 Thread Jeff Morriss
[EMAIL PROTECTED] wrote: No, the ERF type 5 record has a different header than the PCAP header, but MTP2 part is not affected. In fact, the MTP2 (FCS) is not specific to the ERF format, I would say, MTP2 (FCS) is the standart MTP2, but the checksums are present in the 2 last bytes of the

[Wireshark-dev] new dissector for the DekTop PassThrough protocol

2007-02-18 Thread Dr. Uwe Girlich
Hello! After a long period of silence I found it again necessary to add something to Wireshark. I just committed (revision 20839) a new dissector for the DTPT (DekTop PassThrough) protocol, which is used by ActiveSync to access the network from a PDA with Windows Mobile 5 over an USB cable. See

[Wireshark-dev] accumulating data from UDP

2007-02-18 Thread Vladimir Zherdenovsky
Hi, The data of the protocol I written a dissector can be fragmented between UDP packets, but only inside the data I can know that it has been fragmented - UDP not fragmented. How I can accumulate all the data from different UDP packets to one buffer for parse it? Thanks vladimir

[Wireshark-dev] Problems building the SVN version without having an installed version

2007-02-18 Thread Michael Tuexen
Dear all, on a Mac OS X 10.4 system make fails with Making all in agentx /bin/sh ../../libtool --mode=link gcc -DINET6 -no-cpp-precomp - D_U_=__attribute__((unused)) -Wall -Wpointer-arith -W -g -O2 -I/ usr/local/include -pthreads -I/usr/local/include/gtk-2.0 -I/usr/local/

Re: [Wireshark-dev] Problems building the SVN version without having an installed version

2007-02-18 Thread Guy Harris
Michael Tuexen wrote: on a Mac OS X 10.4 system make fails with ... So why is /usr/local/lib/libwireshark.0.0.1.dylib referenced explicitly? I don't know - I tried moving my installed (in /usr/local/lib) versions of libwire* out of the way, checking out a new SVN tree, configuring,

[Wireshark-dev] H.223 dissector - separate bitswapping into separate dissector

2007-02-18 Thread Richard van der Hoff
The H.223 dissector contains code to deal with bitswapped captures - ie, where all of the bytes have their bits backwards. It seems that this is much better handled as a separate dissector entry point, so that the right one can be chosen when the dissector is registered, rather than the

Re: [Wireshark-dev] H.223 dissector - separate bitswapping into separate dissector

2007-02-18 Thread Guy Harris
Richard van der Hoff wrote: The H.223 dissector contains code to deal with bitswapped captures - ie, where all of the bytes have their bits backwards. It seems that this is much better handled as a separate dissector entry point, so that the right one can be chosen when the dissector is

Re: [Wireshark-dev] H.223 dissector - separate bitswapping into separate dissector

2007-02-18 Thread Richard van der Hoff
Guy Harris wrote: Richard van der Hoff wrote: The H.223 dissector contains code to deal with bitswapped captures - ie, where all of the bytes have their bits backwards. It seems that this is much better handled as a separate dissector entry point, so that the right one can be chosen when the

Re: [Wireshark-dev] Malformed packet New dissector

2007-02-18 Thread Guy Harris
your highness wrote: The skeleton of my code that is relevant to this issue is as follows: static guint get_condor_pdu_len(tvbuff_t *tvb, int offset) At least in the current version of Wireshark, a get_pdu_len routine takes three arguments, not two - the first argument is the pinfo

Re: [Wireshark-dev] H.223 dissector - separate bitswapping into separate dissector

2007-02-18 Thread Guy Harris
Richard van der Hoff wrote: Well, if your H.223 is over TCP, it may or may not be bitswapped That presumably means that either 1) call setup negotiates the bit order or 2) the bit order is chosen out of band (e.g., manually). If it's negotiated at call setup time, presumably

Re: [Wireshark-dev] H.223 dissector - separate bitswapping into separate dissector

2007-02-18 Thread Anders Broman
-Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Guy Harris Skickat: den 19 februari 2007 05:19 Till: Developer support list for Wireshark Ämne: Re: [Wireshark-dev] H.223 dissector - separate bitswapping into separate dissector Richard van der Hoff wrote: