Re: [Wireshark-dev] README.packaging is missing

2007-07-16 Thread Graham Bloice
Maynard, Chris wrote: The reason I use the release sources is because presumably they are a working set of files, free from any possible intermediate subversion check-in bugs or code inconsistencies. I suppose if the releases (0.99.6, ...) also carried with them an associated subversion

Re: [Wireshark-dev] [Wireshark-commits] rev 22318: /trunk/epan/ /trunk/epan/dissectors/: packet-diameter.c /trunk/epan/: diam_dict.h diam_dict.l

2007-07-16 Thread Martin Mathieson
This looks pretty good, Luis. I noticed some things that you may well already be aware of: - when you find an unknown AVP, you no longer log it as an expert item - I saw instances where the name shown in diameter.avp.code didn't match the value field of the AVP, e.g. AVPs 17 and 18 (frame 115) in

Re: [Wireshark-dev] [Wireshark-commits] rev 22318: /trunk/epan/ /trunk/epan/dissectors/: packet-diameter.c /trunk/epan/: diam_dict.h diam_dict.l

2007-07-16 Thread Luis EG Ontanon
On 7/16/07, Martin Mathieson [EMAIL PROTECTED] wrote: This looks pretty good, Luis. I noticed some things that you may well already be aware of: - when you find an unknown AVP, you no longer log it as an expert item Not supposed to work, it's still to be added... - I saw instances where the

Re: [Wireshark-dev] [Wireshark-commits] rev 22318: /trunk/epan/ /trunk/epan/dissectors/: packet-diameter.c /trunk/epan/: diam_dict.h diam_dict.l

2007-07-16 Thread Martin Mathieson
No, I Wasn't aware... But that's the rationale in the commit early commit often, the sooner a bug is committed (preferably along with some other code :-) the shorter it takes for it to get noticed the shorter it takes for it to be fixed. It also reminds me of a pirate film I once saw. The

Re: [Wireshark-dev] [Wireshark-commits] rev 22318: /trunk/epan/ /trunk/epan/dissectors/: packet-diameter.c /trunk/epan/: diam_dict.h diam_dict.l

2007-07-16 Thread Luis EG Ontanon
On 7/16/07, Martin Mathieson [EMAIL PROTECTED] wrote: It also reminds me of a pirate film I once saw. The gung-ho captain blasted a hole into his own ship just before his crew were to board another ship to put fire into their bellies :-) That has happened in real life...

[Wireshark-dev] decode data display the same

2007-07-16 Thread NKS
Sub: how can i hack wireshark to show the actual data(decoded) ? Please have a look at the following screenshot(wireshark) hxxp://img512.imageshack.us/img512/1255/data1448bytesyb7.jpg ( same screenshot also available at the following link hxxp://i11.tinypic.com/4qr3j48.jpg ) I know the structure

Re: [Wireshark-dev] decode data display the same

2007-07-16 Thread Abhik Sarkar
Looks like you (or someone else) need to develop a dissector for this protocol :-) On 7/16/07, NKS [EMAIL PROTECTED] wrote: Sub: how can i hack wireshark to show the actual data(decoded) ? Please have a look at the following screenshot(wireshark)

Re: [Wireshark-dev] [Wireshark-commits] rev 22318: /trunk/epan/ /trunk/epan/dissectors/: packet-diameter.c /trunk/epan/: diam_dict.h diam_dict.l

2007-07-16 Thread Martin Mathieson
The old diameter dissector doesn't lie ruined at the botttom of the sea, but hopefully people will help test/finish the new one. On 7/16/07, Luis EG Ontanon [EMAIL PROTECTED] wrote: On 7/16/07, Martin Mathieson [EMAIL PROTECTED] wrote: It also reminds me of a pirate film I once saw. The

Re: [Wireshark-dev] decode data display the same

2007-07-16 Thread Gerhard Gappmeier
On Monday 16 July 2007 14:21, NKS wrote: Sub: how can i hack wireshark to show the actual data(decoded) ? You will need to write a dissector plugin for that like already mentioned. I don't think that somebody else will do that for you. Go on and read the developer documentation.

[Wireshark-dev] what parameters for dissector_add() for a non-nested protocol

2007-07-16 Thread Fulko . Hew
I've scoured the READMEs and dissectors for details on the parameters for disector_add(). It seems as though all the cases are different than my (simple) case, so I'm at a loss as to how to register my sub-protocol, so it gets called properly. I have a private WTAP type for which I have

[Wireshark-dev] asn.1 format from tag-length-value format

2007-07-16 Thread vikash jaiswal
Hi , Can anyone please tell me how I may convert a tag-length-value protocol into asn.1 format. While trying to understand writing a dissector , I have developed a test protocol and successfully written a dissector fot it . Now I wish to generate a dissector automatically by the

Re: [Wireshark-dev] Win32: remove binary zlib.dll completely and compile it for all MSVC variants?

2007-07-16 Thread Gianluca Varenni
- Original Message - From: Ulf Lamping [EMAIL PROTECTED] To: Developer support list for Wireshark wireshark-dev@wireshark.org Sent: Friday, July 13, 2007 6:05 PM Subject: Re: [Wireshark-dev] Win32: remove binary zlib.dll completely and compile it for all MSVC variants? Gerald Combs

Re: [Wireshark-dev] decode data display the same

2007-07-16 Thread Jaap Keuter
NKS wrote: Sub: how can i hack wireshark to show the actual data(decoded) ? Please have a look at the following screenshot(wireshark) hxxp://img512.imageshack.us/img512/1255/data1448bytesyb7.jpg ( same screenshot also available at the following link hxxp://i11.tinypic.com/4qr3j48.jpg ) I

Re: [Wireshark-dev] asn.1 format from tag-length-value format

2007-07-16 Thread Guy Harris
vikash jaiswal wrote: While trying to understand writing a dissector , I have developed a test protocol and successfully written a dissector fot it . Now I wish to generate a dissector automatically by the asn1 convertor available with wireshark.But my test protocol is in tag-length-value

[Wireshark-dev] error in changing from built in to plugin

2007-07-16 Thread Yashwant Shitoot
Hello, I am changing my dissector from built in to plugin removed it from Makefile.common in 'epan/dissectors'. Added everywhere according to README.plugin. done clean and dist-clean. Redid ./configure I get following errors: epan/.libs/libwireshark.so: undefined reference to

Re: [Wireshark-dev] error in changing from built in to plugin

2007-07-16 Thread Jaap Keuter
Hi, You'll need a maintainer clean for that. Or maybe deleting epan/dissectors/register.* is enough. Thanx, Jaap Yashwant Shitoot wrote: Hello, I am changing my dissector from built in to plugin removed it from Makefile.common in 'epan/dissectors'. Added everywhere according to

Re: [Wireshark-dev] error in changing from built in to plugin

2007-07-16 Thread Yashwant Shitoot
Jaap, Thanks deleting epan/dissectors/register.* was enough. Yash Park yourself in front of a world of choices in alternative vehicles. Visit the Yahoo! Auto Green Center.

Re: [Wireshark-dev] README.packaging is missing

2007-07-16 Thread Maynard, Chris
Graham, Hmm, if you browse to the releases folder from the link you sent, it does seem that there is a subversion revision associated with each release after all. For example, wireshark-0.99.5 appears to be synonymous with subversion revision 21263. So once 0.99.6 is available in the same

Re: [Wireshark-dev] README.packaging is missing

2007-07-16 Thread Gerald Combs
Maynard, Chris wrote: So, if it's your recommendation to use the subversion sources rather than posted sources, can the next 0.99.7 release also include the associated subversion revision? The subversion revision has been included in releases for a while now in svnversion.h. I've added a note

Re: [Wireshark-dev] README.packaging is missing

2007-07-16 Thread Gerald Combs
Graham Bloice wrote: I would suggest that you use the releases branches in svn. See http://anonsvn.wireshark.org/viewvc/viewvc.py/releases/, although it appears that 0.99.6 has it's own little special place at the moment. Gerald? Done. ___

Re: [Wireshark-dev] README.packaging is missing

2007-07-16 Thread Graham Bloice
Maynard, Chris wrote: Graham, Hmm, if you browse to the releases folder from the link you sent, it does seem that there is a subversion revision associated with each release after all. For example, wireshark-0.99.5 appears to be synonymous with subversion revision 21263. So once 0.99.6 is

[Wireshark-dev] Feature request: Support EBCDIC display for DRDA protocol

2007-07-16 Thread Ingo Franzki
Hello Wireshark Developers, I have just found out that you now support the DRDA protocol. This is very great! However, I have a request to add the following feature: I am often dealing with Host databases that use the EBCDIC codepage. In DRDA the receiver has to translate the data into its

Re: [Wireshark-dev] Feature request: Support EBCDIC display for DRDA protocol

2007-07-16 Thread Stephen Fisher
On Mon, Jul 16, 2007 at 07:53:24PM +0200, Ingo Franzki wrote: I have just found out that you now support the DRDA protocol. This is very great! However, I have a request to add the following feature: Thanks for your suggestion! So we do not forget it, would you mind opening a bug at

[Wireshark-dev] Is anyone already working on dissectors for MPA, DDP and RDMA?

2007-07-16 Thread Yves Geissbühler
Hi everyone, as suggested by the Wireshark Developer Guide I would like to announce my intension to write several dissectors to add support for the protocols MPA[1], DDP[2] and RDMA[3]. You may also find further information under [4]. If anyone is already working on this please let me know.

Re: [Wireshark-dev] what parameters for dissector_add() for a non-nested protocol

2007-07-16 Thread Guy Harris
On Jul 16, 2007, at 7:02 AM, [EMAIL PROTECTED] wrote: The normal approach is to have (for a frame level dissector): dissector_add(wtap_encap, WTAP_ENCAP_MYTYPE, mytype_handle); OR something like this for a nested dissector (where its based on data in the super-frame (I think)):