Re: [Wireshark-dev] Can we put android phone device connected over USB to Win 7 PC in promiscous mode?

2015-02-24 Thread Michal Labedzki
Hello Bálint,

That works as application on Android or OS? I am not sure that user
will be able to sniffing Android traffic on Debian like that.

I see two cases:
1. User want to capture Android traffic.
2. User want to use Android device as... sniffer (monitor mode?) to
capture air traffic.

Lil' Debi - I cannot found it on Play Store. F-Droid too.

On 24 February 2015 at 08:42, Bálint Réczey bal...@balintreczey.hu wrote:
 2015-02-24 8:13 GMT+01:00 Shashikant Ajegaonkar ajegaon...@gmail.com:
 Hi All,

 Has anyone tried to put WiFi interface of Android device in promiscous mode?
 Is it possible to enumerate phone over adb interface as device  wireless
 network interface in Win7 machine and configure it in promiscous mode for
 sniffer application?
 It is not Win 7 related, but you can run Wireshark and capture in
 promiscuous mode on Android by setting up a Debian chroot:
 http://balintreczey.hu/blog/run-wireshark-on-android-using-lil-debi/

 Cheers,
 Balint
 ___
 Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
 Archives:http://www.wireshark.org/lists/wireshark-dev
 Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
  mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe



-- 

Pozdrawiam / Best regards
-
Michał Łabędzki, Software Engineer
Tieto Corporation

Product Development Services

http://www.tieto.com / http://www.tieto.pl
---
ASCII: Michal Labedzki
location: Swobodna 1 Street, 50-088 Wrocław, Poland
room: 5.01 (desk next to 5.08)
---
Please note: The information contained in this message may be legally
privileged and confidential and protected from disclosure. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorised use, distribution or copying of this
communication is strictly prohibited. If you have received this
communication in error, please notify us immediately by replying to
the message and deleting it from your computer. Thank You.
---
Please consider the environment before printing this e-mail.
---
Tieto Poland spółka z ograniczoną odpowiedzialnością z siedzibą w
Szczecinie, ul. Malczewskiego 26. Zarejestrowana w Sądzie Rejonowym
Szczecin-Centrum w Szczecinie, XIII Wydział Gospodarczy Krajowego
Rejestru Sądowego pod numerem 124858. NIP: 8542085557. REGON:
812023656. Kapitał zakładowy: 4 271500 PLN
___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

[Wireshark-dev] Use Transifex for manage Translations

2015-02-24 Thread Alexis La Goutte
Hi,

I have start to use Transifex web service to manage and follow Wireshark
Translations.

Transifex, it is a Gerrit of translation ;-), it is possible to review
translation, add comment...

The idea is manage directly translation with Transifex and refuse patch
about translation on Gerrit.

It is possible to download and reupload directy ts file (don't need Gerrit)

I think, the translation will be resync (between Gerrit/Transifex) every
week, i have start a script for launch this resync.


Regards,
___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Re: [Wireshark-dev] Can we put android phone device connected over USB to Win 7 PC in promiscous mode?

2015-02-24 Thread Shashikant Ajegaonkar
Hi Balint and Michael,

Thanks for the information.

Hi Balint,

Is there a way to save the captured files from wireshark running on Lil
debi to the android device?

Is anyone aware of enumeration of WLAN interface from android phone  as
WiFi interface (WLAN adapter) on Win 7 or Linux hosts?


On Tue, Feb 24, 2015 at 2:54 PM, Bálint Réczey bal...@balintreczey.hu
wrote:

 Hi Michal,

 2015-02-24 9:03 GMT+01:00 Michal Labedzki michal.labed...@tieto.com:
  Hello Bálint,
 
  That works as application on Android or OS? I am not sure that user
 Lil' Debi is an Android application that lets you install Debian on a
 loop device or in a chroot.
 Then you can run a shell or any command as an OS process.

  will be able to sniffing Android traffic on Debian like that.
 I did capture traffic originating from my (Nexus 7) tablet, thus it
 seems you can can capture everything.

 
  I see two cases:
  1. User want to capture Android traffic.
  2. User want to use Android device as... sniffer (monitor mode?) to
  capture air traffic.
 
  Lil' Debi - I cannot found it on Play Store. F-Droid too.
 It has been removed from Play Store, indeed.
 The F-Droid link seems to be OK and I also see it listed on on my
 Android devices in the F-Droid store.

 Cheers,
 Balint

 
  On 24 February 2015 at 08:42, Bálint Réczey bal...@balintreczey.hu
 wrote:
  2015-02-24 8:13 GMT+01:00 Shashikant Ajegaonkar ajegaon...@gmail.com:
  Hi All,
 
  Has anyone tried to put WiFi interface of Android device in promiscous
 mode?
  Is it possible to enumerate phone over adb interface as device
 wireless
  network interface in Win7 machine and configure it in promiscous mode
 for
  sniffer application?
  It is not Win 7 related, but you can run Wireshark and capture in
  promiscuous mode on Android by setting up a Debian chroot:
  http://balintreczey.hu/blog/run-wireshark-on-android-using-lil-debi/
 
  Cheers,
  Balint
 
 ___
  Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
  Archives:http://www.wireshark.org/lists/wireshark-dev
  Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
   mailto:wireshark-dev-requ...@wireshark.org
 ?subject=unsubscribe
 
 
 
  --
 
  Pozdrawiam / Best regards
 
 -
  Michał Łabędzki, Software Engineer
  Tieto Corporation
 
  Product Development Services
 
  http://www.tieto.com / http://www.tieto.pl
  ---
  ASCII: Michal Labedzki
  location: Swobodna 1 Street, 50-088 Wrocław, Poland
  room: 5.01 (desk next to 5.08)
  ---
  Please note: The information contained in this message may be legally
  privileged and confidential and protected from disclosure. If the
  reader of this message is not the intended recipient, you are hereby
  notified that any unauthorised use, distribution or copying of this
  communication is strictly prohibited. If you have received this
  communication in error, please notify us immediately by replying to
  the message and deleting it from your computer. Thank You.
  ---
  Please consider the environment before printing this e-mail.
  ---
  Tieto Poland spółka z ograniczoną odpowiedzialnością z siedzibą w
  Szczecinie, ul. Malczewskiego 26. Zarejestrowana w Sądzie Rejonowym
  Szczecin-Centrum w Szczecinie, XIII Wydział Gospodarczy Krajowego
  Rejestru Sądowego pod numerem 124858. NIP: 8542085557. REGON:
  812023656. Kapitał zakładowy: 4 271500 PLN
 ___
 Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
 Archives:http://www.wireshark.org/lists/wireshark-dev
 Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
  mailto:wireshark-dev-requ...@wireshark.org
 ?subject=unsubscribe




-- 
*Thanks  Regards,*
*Shashikant P. Ajegaonkar*
*+91-8886889456*
___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Re: [Wireshark-dev] Can we put android phone device connected over USB to Win 7 PC in promiscous mode?

2015-02-24 Thread Bálint Réczey
2015-02-24 12:12 GMT+01:00 Shashikant Ajegaonkar ajegaon...@gmail.com:
 Hi Balint and Michael,

 Thanks for the information.

 Hi Balint,

 Is there a way to save the captured files from wireshark running on Lil debi
 to the android device?
I have not tried that but I bet you can somehow see both filesystems.
If nothing else, scp would work.

Cheers,
Balint


 Is anyone aware of enumeration of WLAN interface from android phone  as WiFi
 interface (WLAN adapter) on Win 7 or Linux hosts?


 On Tue, Feb 24, 2015 at 2:54 PM, Bálint Réczey bal...@balintreczey.hu
 wrote:

 Hi Michal,

 2015-02-24 9:03 GMT+01:00 Michal Labedzki michal.labed...@tieto.com:
  Hello Bálint,
 
  That works as application on Android or OS? I am not sure that user
 Lil' Debi is an Android application that lets you install Debian on a
 loop device or in a chroot.
 Then you can run a shell or any command as an OS process.

  will be able to sniffing Android traffic on Debian like that.
 I did capture traffic originating from my (Nexus 7) tablet, thus it
 seems you can can capture everything.

 
  I see two cases:
  1. User want to capture Android traffic.
  2. User want to use Android device as... sniffer (monitor mode?) to
  capture air traffic.
 
  Lil' Debi - I cannot found it on Play Store. F-Droid too.
 It has been removed from Play Store, indeed.
 The F-Droid link seems to be OK and I also see it listed on on my
 Android devices in the F-Droid store.

 Cheers,
 Balint

 
  On 24 February 2015 at 08:42, Bálint Réczey bal...@balintreczey.hu
  wrote:
  2015-02-24 8:13 GMT+01:00 Shashikant Ajegaonkar ajegaon...@gmail.com:
  Hi All,
 
  Has anyone tried to put WiFi interface of Android device in promiscous
  mode?
  Is it possible to enumerate phone over adb interface as device
  wireless
  network interface in Win7 machine and configure it in promiscous mode
  for
  sniffer application?
  It is not Win 7 related, but you can run Wireshark and capture in
  promiscuous mode on Android by setting up a Debian chroot:
  http://balintreczey.hu/blog/run-wireshark-on-android-using-lil-debi/
 
  Cheers,
  Balint
 
  ___
  Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
  Archives:http://www.wireshark.org/lists/wireshark-dev
  Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 
  mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe
 
 
 
  --
 
  Pozdrawiam / Best regards
 
  -
  Michał Łabędzki, Software Engineer
  Tieto Corporation
 
  Product Development Services
 
  http://www.tieto.com / http://www.tieto.pl
  ---
  ASCII: Michal Labedzki
  location: Swobodna 1 Street, 50-088 Wrocław, Poland
  room: 5.01 (desk next to 5.08)
  ---
  Please note: The information contained in this message may be legally
  privileged and confidential and protected from disclosure. If the
  reader of this message is not the intended recipient, you are hereby
  notified that any unauthorised use, distribution or copying of this
  communication is strictly prohibited. If you have received this
  communication in error, please notify us immediately by replying to
  the message and deleting it from your computer. Thank You.
  ---
  Please consider the environment before printing this e-mail.
  ---
  Tieto Poland spółka z ograniczoną odpowiedzialnością z siedzibą w
  Szczecinie, ul. Malczewskiego 26. Zarejestrowana w Sądzie Rejonowym
  Szczecin-Centrum w Szczecinie, XIII Wydział Gospodarczy Krajowego
  Rejestru Sądowego pod numerem 124858. NIP: 8542085557. REGON:
  812023656. Kapitał zakładowy: 4 271500 PLN

 ___
 Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
 Archives:http://www.wireshark.org/lists/wireshark-dev
 Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev

 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe




 --
 Thanks  Regards,
 Shashikant P. Ajegaonkar
 +91-8886889456
___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Re: [Wireshark-dev] Can we put android phone device connected over USB to Win 7 PC in promiscous mode?

2015-02-24 Thread Shashikant Ajegaonkar
Hi Balint,

When captured the packets on wlan0 interface, were you able to dissect the
Mac frames as well?

On Tue, Feb 24, 2015 at 5:54 PM, Bálint Réczey bal...@balintreczey.hu
wrote:

 2015-02-24 12:12 GMT+01:00 Shashikant Ajegaonkar ajegaon...@gmail.com:
  Hi Balint and Michael,
 
  Thanks for the information.
 
  Hi Balint,
 
  Is there a way to save the captured files from wireshark running on Lil
 debi
  to the android device?
 I have not tried that but I bet you can somehow see both filesystems.
 If nothing else, scp would work.

 Cheers,
 Balint

 
  Is anyone aware of enumeration of WLAN interface from android phone  as
 WiFi
  interface (WLAN adapter) on Win 7 or Linux hosts?
 
 
  On Tue, Feb 24, 2015 at 2:54 PM, Bálint Réczey bal...@balintreczey.hu
  wrote:
 
  Hi Michal,
 
  2015-02-24 9:03 GMT+01:00 Michal Labedzki michal.labed...@tieto.com:
   Hello Bálint,
  
   That works as application on Android or OS? I am not sure that user
  Lil' Debi is an Android application that lets you install Debian on a
  loop device or in a chroot.
  Then you can run a shell or any command as an OS process.
 
   will be able to sniffing Android traffic on Debian like that.
  I did capture traffic originating from my (Nexus 7) tablet, thus it
  seems you can can capture everything.
 
  
   I see two cases:
   1. User want to capture Android traffic.
   2. User want to use Android device as... sniffer (monitor mode?) to
   capture air traffic.
  
   Lil' Debi - I cannot found it on Play Store. F-Droid too.
  It has been removed from Play Store, indeed.
  The F-Droid link seems to be OK and I also see it listed on on my
  Android devices in the F-Droid store.
 
  Cheers,
  Balint
 
  
   On 24 February 2015 at 08:42, Bálint Réczey bal...@balintreczey.hu
   wrote:
   2015-02-24 8:13 GMT+01:00 Shashikant Ajegaonkar 
 ajegaon...@gmail.com:
   Hi All,
  
   Has anyone tried to put WiFi interface of Android device in
 promiscous
   mode?
   Is it possible to enumerate phone over adb interface as device
   wireless
   network interface in Win7 machine and configure it in promiscous
 mode
   for
   sniffer application?
   It is not Win 7 related, but you can run Wireshark and capture in
   promiscuous mode on Android by setting up a Debian chroot:
   http://balintreczey.hu/blog/run-wireshark-on-android-using-lil-debi/
  
   Cheers,
   Balint
  
  
 ___
   Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
 
   Archives:http://www.wireshark.org/lists/wireshark-dev
   Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
  
   mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe
  
  
  
   --
  
   Pozdrawiam / Best regards
  
  
 -
   Michał Łabędzki, Software Engineer
   Tieto Corporation
  
   Product Development Services
  
   http://www.tieto.com / http://www.tieto.pl
   ---
   ASCII: Michal Labedzki
   location: Swobodna 1 Street, 50-088 Wrocław, Poland
   room: 5.01 (desk next to 5.08)
   ---
   Please note: The information contained in this message may be legally
   privileged and confidential and protected from disclosure. If the
   reader of this message is not the intended recipient, you are hereby
   notified that any unauthorised use, distribution or copying of this
   communication is strictly prohibited. If you have received this
   communication in error, please notify us immediately by replying to
   the message and deleting it from your computer. Thank You.
   ---
   Please consider the environment before printing this e-mail.
   ---
   Tieto Poland spółka z ograniczoną odpowiedzialnością z siedzibą w
   Szczecinie, ul. Malczewskiego 26. Zarejestrowana w Sądzie Rejonowym
   Szczecin-Centrum w Szczecinie, XIII Wydział Gospodarczy Krajowego
   Rejestru Sądowego pod numerem 124858. NIP: 8542085557. REGON:
   812023656. Kapitał zakładowy: 4 271500 PLN
 
 
 ___
  Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
  Archives:http://www.wireshark.org/lists/wireshark-dev
  Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 
  mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe
 
 
 
 
  --
  Thanks  Regards,
  Shashikant P. Ajegaonkar
  +91-8886889456




-- 
*Thanks  Regards,*
*Shashikant P. Ajegaonkar*
*+91-8886889456*
___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Re: [Wireshark-dev] Google deprecating OpenID 2.0

2015-02-24 Thread Gerald Combs
On 2/24/15 1:34 AM, Graham Bloice wrote:
 
 
 On 23 February 2015 at 23:51, Gerald Combs ger...@wireshark.org
 mailto:ger...@wireshark.org wrote:
 
 On 2/22/15 6:01 AM, Graham Bloice wrote:
  See https://developers.google.com/accounts/docs/OpenID
 
  Does this affect our use of Gerrit if we use a Google account to
  authenticate?
 
 Yes. In case anyone missed the other responses you need to stop
 authenticating using your Google account and switch to another account
 before April 20. I've added a notice to the login page.
 
 In the near term we need to find a list of stable OpenID 2.0 providers
 that we can recommend on the login page. In the long term we need to
 find a more stable way of authenticating to Gerrit.
 
 
 And is there any possibility of Gerrit supporting Open ID 2.0 Connect
 which is what Google+ supports and seems to be the future for Open ID? 
 The Gerrit issues tracker is very confusing on this.

I'm not sure. The closest thing I've seen so far was a change to add
GitHub OAuth support but it was abandoned:

https://gerrit-review.googlesource.com/#/c/57570/

The following discussions provide a bit more background:

https://groups.google.com/forum/#!topic/repo-discuss/Hjn-6BV3KBU
https://groups.google.com/forum/#!topic/repo-discuss/nrtxry9SNLg
___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe


Re: [Wireshark-dev] Google deprecating OpenID 2.0

2015-02-24 Thread Graham Bloice
On 24 February 2015 at 17:41, Gerald Combs ger...@wireshark.org wrote:

 On 2/24/15 1:34 AM, Graham Bloice wrote:
 
 
  On 23 February 2015 at 23:51, Gerald Combs ger...@wireshark.org
  mailto:ger...@wireshark.org wrote:
 
  On 2/22/15 6:01 AM, Graham Bloice wrote:
   See https://developers.google.com/accounts/docs/OpenID
  
   Does this affect our use of Gerrit if we use a Google account to
   authenticate?
 
  Yes. In case anyone missed the other responses you need to stop
  authenticating using your Google account and switch to another
 account
  before April 20. I've added a notice to the login page.
 
  In the near term we need to find a list of stable OpenID 2.0
 providers
  that we can recommend on the login page. In the long term we need to
  find a more stable way of authenticating to Gerrit.
 
 
  And is there any possibility of Gerrit supporting Open ID 2.0 Connect
  which is what Google+ supports and seems to be the future for Open ID?
  The Gerrit issues tracker is very confusing on this.

 I'm not sure. The closest thing I've seen so far was a change to add
 GitHub OAuth support but it was abandoned:

 https://gerrit-review.googlesource.com/#/c/57570/

 The following discussions provide a bit more background:

 https://groups.google.com/forum/#!topic/repo-discuss/Hjn-6BV3KBU
 https://groups.google.com/forum/#!topic/repo-discuss/nrtxry9SNLg


From those threads it seems that the GitHub OAuth 2.0 patch was abandoned
as it wasn't pluggable, and that they are going to come back with a
pluggable version.

It also seems that they will have to support OAuth 2.0 in general (which
Google+ can be configured to work as), as that's where everyone is heading
according to the list in one thread.


-- 
Graham Bloice
___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Re: [Wireshark-dev] Google deprecating OpenID 2.0

2015-02-24 Thread Gerald Combs
On 2/24/15 10:15 AM, Graham Bloice wrote:
 
 On 24 February 2015 at 17:41, Gerald Combs ger...@wireshark.org
 mailto:ger...@wireshark.org wrote:
 
 On 2/24/15 1:34 AM, Graham Bloice wrote:
 
 
  On 23 February 2015 at 23:51, Gerald Combs ger...@wireshark.org 
 mailto:ger...@wireshark.org
  mailto:ger...@wireshark.org mailto:ger...@wireshark.org wrote:
 
  On 2/22/15 6:01 AM, Graham Bloice wrote:
   See https://developers.google.com/accounts/docs/OpenID
  
   Does this affect our use of Gerrit if we use a Google account to
   authenticate?
 
  Yes. In case anyone missed the other responses you need to stop
  authenticating using your Google account and switch to another
 account
  before April 20. I've added a notice to the login page.
 
  In the near term we need to find a list of stable OpenID 2.0
 providers
  that we can recommend on the login page. In the long term we
 need to
  find a more stable way of authenticating to Gerrit.
 
 
  And is there any possibility of Gerrit supporting Open ID 2.0 Connect
  which is what Google+ supports and seems to be the future for Open ID?
  The Gerrit issues tracker is very confusing on this.
 
 I'm not sure. The closest thing I've seen so far was a change to add
 GitHub OAuth support but it was abandoned:
 
 https://gerrit-review.googlesource.com/#/c/57570/
 
 The following discussions provide a bit more background:
 
 https://groups.google.com/forum/#!topic/repo-discuss/Hjn-6BV3KBU
 https://groups.google.com/forum/#!topic/repo-discuss/nrtxry9SNLg
 
 
 From those threads it seems that the GitHub OAuth 2.0 patch was
 abandoned as it wasn't pluggable, and that they are going to come back
 with a pluggable version.

It looks like work has started:

https://gerrit-review.googlesource.com/#/c/65101/

 It also seems that they will have to support OAuth 2.0 in general (which
 Google+ can be configured to work as), as that's where everyone is
 heading according to the list in one thread.


___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe


[Wireshark-dev] Protocol Export objects - New Dissector Development

2015-02-24 Thread leonardoc...@libero.it


Hello.

I am writing to inform that, some time ago from now, I implemented the Export 
FTP Object functionality. I still have two issue: 
when saving large files Wireshark crashes
when clicking the Save all button the Wireshark - Export - FTP objects list 
freezes in Non Responding mode. 


After fixing both issues I will do some cleanup; then I will be able to commit 
my code to the repository. I won't be able to take this remaining steps before 
10 days' time though.

Regarding future work with Wireshark, I have been thinking of adding the Export 
Object functionality to IMAP, POP or SMTP. Are there other protocols for which 
this functionality is sought after by the uses community? If yes, which are 
they?

Are there any simple protocols which need a dissector to be added to 
Whireshark. I thought of some; but all of them seem to already supported in 
Wireshark.

Are there any protocol you can suggest? I would like to develop the dissector 
for a simple protocol, and then with the acquired experience maybe try 
something more complex.


Please let me know. Thank you very much in advance.

___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Re: [Wireshark-dev] Can we put android phone device connected over USB to Win 7 PC in promiscous mode?

2015-02-24 Thread Peter Wu
Hi,

On Tue, Feb 24, 2015 at 08:30:09AM +0100, Michal Labedzki wrote:
 Hello,
 
 I think I am working on solution for you... If you have ADB (SDK) and
 tcpdump (with permissions) then I can emulate live capture from
 Android devices. Please check:
 adb shell tcpdump -D
 adb shell su -c tcpdump -D

Before you attempt to use the output of `adb shell` in a pipe, keep in
mind that adb mangles newlines (LF - CRLF) and is therefore unsuitable
for binary data. This does not matter for textual output such as
tcpdump -D, but it affects tcpdump -w - (writes pcap to stdout).

 Limitation: works only with Wireshark, or standalone application, not
 Windows Interface.
 
 On 24 February 2015 at 08:13, Shashikant Ajegaonkar
 ajegaon...@gmail.com wrote:
  Hi All,
 
  Has anyone tried to put WiFi interface of Android device in promiscous mode?
  Is it possible to enumerate phone over adb interface as device  wireless
  network interface in Win7 machine and configure it in promiscous mode for
  sniffer application?

I have once written an Android app which can put a wireless interface in
promiscuous mode and capture layer 2 frames (802.11). There are some
issues to consider:

 - The wireless driver of my phone did not support monitor mode. So I
   bought a USB on the go cable and a Ralink 802.11n USB adapter using
   the rt2x00 driver. This driver was not supported by the custom
   firmware (Cyanogenmod) so I had to build a new kernel as well.
 - The easiest way to make use of tcpdump is by running it as root, but
   you can also use capabilities and declare a manifest permission in
   the Android app. (This required a kernel patch,
   http://stackoverflow.com/q/13042117/427545).
 - Battery drains fast when using an external USB adapter, phone can
   get quite hot.
 - If your firmware does not include tcpdump, it is actually quite easy
   to build it. All you need are the libpcap and tcpdump sources and the
   Android NDK.

Oh and it is not trivial to build Wireshark for Android. It has many
dependencies, and last time I looked using dumpcap/tshark, I stopped
once it notes that Glib was missing.

If you just want to debug an app on the phone, it is much easier to
setup a VPN/proxy and start tapping at the VPN or proxy server.
-- 
Kind regards,
Peter Wu
https://lekensteyn.nl
___
Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe