[Wireshark-dev] [PATCH] IEEE 802.15.4 dissector and libpcap support

2007-09-20 Thread Owen Kirby

Wireshark-dev,

A few months back I posted a patch adding support for the DLT_IEEE802154 
capture type, as well as dissectors for the IEEE 802.15.4 protocol. As 
per your requests I made changes to the patch in order to comply with 
Wireshark coding standards, created a page on the Wireshark Wiki 
(http://wiki.wireshark.org/IEEE_802.15.4), and uploaded a sample capture 
file (see Wiki page).


I have been rather busy these last few months, and getting this patch 
accepted has slipped my mind. Things have slowed down a little lately, 
so I have taken the time to fix up a few bugs(many thanks to Joerg 
Wunsch for taking the time to build, test, and debug the dissectors in a 
*NIX environment), and rebuild the .patch file against the latest 
Wireshark sources.


Thanks,
Owen Kirby


ieee802154r4.patch.gz
Description: GNU Zip compressed data
___
Wireshark-dev mailing list
Wireshark-dev@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-dev


Re: [Wireshark-dev] [PATCH] IEEE 802.15.4 dissectors and libpcap support.

2007-07-24 Thread Owen Kirby

Hi Richard,

 The ccitt crc16 routines are already in crc16.h - please could you 
use them

 rather than reinventing this particular wheel?
When I first wrote the dissectors, I was having trouble finding a CRC 
algorithm that would produce the right answer. IEEE 802.15.4 transmits 
bytes in reflected bit-order, and calculates the CRC over those bits as 
they are transmitted over the air. IEEE 802.15.4 also further violates 
the CCITT specification by using initial and final values of 0x, 
instead of 0x. I now know substantially more about CRC's than I did 
when I first wrote those functions, and I really should have replaced 
them with those already available in Wireshark. They have been fixed in 
the attached patch.


 Your patch messes up the indentation in libpcap.c - please can you 
sort it out?
My apologies about that, my editor mucked that up, and I thought I had 
fixed the damage, but apparently I didn't. I should note that the 
indentation in libpcap.c is inconsistent anyways (some parts use soft 
tabs, others use hard tabs). Hopefully, the attached patch should 
correct any out-of-place hard or soft tabs.


 I'm not generally a fan of 500-line functions - any chance the 
offender could

 be split up a bit?
I assume you are referring to dissect_ieee802154_common()? Well, I have 
taken the time to break that function down a bit, but it's still a bit 
on the lengthy side (just over 300 lines). I also broke the command 
dissector function down into a bunch of subroutines. Hopefully this is 
more to your liking.


 Please could you create a Protocols/ieee802154 page on the wiki, and 
add an

 example capture, so we can see what your dissector does?
Certainly, I would be more than happy to add a protocol Wiki page for 
IEEE 802.15.4, is it a high priority, or can I get that done later this 
week once I have some time?


Thanks,
Owen Kirby


ieee802154r3.patch.gz
Description: GNU Zip compressed data
___
Wireshark-dev mailing list
Wireshark-dev@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-dev