Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, The unistim plugin was added to the repository in revision 22558. The buildbot builds are in the download section. Thanx, Jaap Jaap Keuter wrote: Hi, A unistim plugin for Wireshark is in the works. It's currently at the stage of fuzztesting, which shows some problems. Once that's

[Wireshark-dev] save payload from RTP trace

2007-08-21 Thread Илья Куделин
Hi, sorry for my english :) I am writing plugin for wireshark, which will be decode payload from RTP-trace. payload was encoded using G.729. in this moment i can save payload from only one packet(20-30bytes decode to 20-30ms). Please, can anybody tell me how i can scan all packages in trace. i

Re: [Wireshark-dev] save payload from RTP trace

2007-08-21 Thread Abhik Sarkar
The following links should help you get started... http://www.wireshark.org/docs/wsdg_html_chunked/ChDissectReassemble.html http://www.wireshark.org/docs/wsdg_html_chunked/ChDissectConversation.html Best regards, Abhik. On 8/21/07, Илья Куделин [EMAIL PROTECTED] wrote: Hi, sorry for my english

Re: [Wireshark-dev] save payload from RTP trace

2007-08-21 Thread Abhik Sarkar
Hmmm... it seems that the src dir/gtk/rtp* file might also be of interest to you, especially rtp_player.c. Best regards, Abhik On 8/21/07, Abhik Sarkar [EMAIL PROTECTED] wrote: The following links should help you get started...

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Hi Jaap, I went to http://www.wireshark.org/download/automated/win32/ but could only find build 22562. I am not sure exactly how patches are aggregated in the developmen releases. Does 22562 include your Unistim patch? The decodes that I get from a VoIP call do not seem to inidicate Unistim

[Wireshark-dev] warning while running wireshark

2007-08-21 Thread Toeung, Chanthy
Hi, I'm building a plugin IPMB for Wireshark. All work well except when i start Wireshark i get a warning message as follow: your preferences once should remove this warning) 03:41:29 Warn /home/toeung/.wireshark/preferences line 2377: No such preference user_dlt_b.header_proto

Re: [Wireshark-dev] warning while running wireshark

2007-08-21 Thread Graham Bloice
Toeung, Chanthy wrote: Hi, I'm building a plugin IPMB for Wireshark. All work well except when i start Wireshark i get a warning message as follow: your preferences once should remove this warning) 03:41:29 Warn /home/toeung/.wireshark/preferences line 2377: No such preference

Re: [Wireshark-dev] warning while running wireshark

2007-08-21 Thread Joerg Mayer
On Tue, Aug 21, 2007 at 11:27:49AM -0400, Toeung, Chanthy wrote: 03:41:29 Warn /home/toeung/.wireshark/preferences line 2441: No such preference user_dlt_d.trailer_proto (applying your preferences once should remove this warning)

Re: [Wireshark-dev] warning while running wireshark

2007-08-21 Thread Toeung, Chanthy
I got it. Thank all, Chanthy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Joerg Mayer Sent: Tuesday, August 21, 2007 11:33 AM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] warning while running wireshark On Tue, Aug 21, 2007

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Hi Jaap, Thanx for the speedy response. Here is the decode of a Unistim Packet from a call I made: Frame 31 (164 bytes on wire, 164 bytes captured) Ethernet II, Src: Cisco_01:54:01 (00:05:32:01:54:01), Dst: Nortel_e4:62:ab (00:15:9b:e4:62:ab) Internet Protocol, Src: 204.83.231.69

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Newton, Don
Can you attach a pcap file? Don Newton From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of J P Sent: Tuesday, August 21, 2007 12:32 PM To: wireshark-dev@wireshark.org Subject: Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, A decode is fine, but a capture file would be better. Thanx, Jaap J P wrote: Hi Jaap, Thanx for the speedy response. Here is the decode of a Unistim Packet from a call I made: Frame 31 (164 bytes on wire, 164 bytes captured) Ethernet II, Src: Cisco_01:54:01

[Wireshark-dev] Cairo errors when running Wireshark on an embedded system

2007-08-21 Thread Fulko Hew
The good news is I no longer have my previous complaint about a misconfigured fonts.conf. (When I build the X client libraries it appears that fontconfig did not get built properly. When I explicitly rebuilt it manually, that resolved the issue.) Today's problem is while invoking Wireshark, I

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Hi, I do not see a UNISTIM plug-in in the C:\Program Files\Wireshark\plugins\0.99.7-SVN-22562 directory or an updated RUDP.DLLfile. Does one have to do something specific to enable or download the UNISTIM decoder? I am running Version 0.99.7-SVN-22562 (SVN Rev 22562) Thanx, John

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jeff Morriss
Good reason to convert it to a regular dissector! ;-) (Sorry, couldn't help it...) Luis EG Ontanon wrote: It's missing from packaging/nsis/wireshark.nsi so it's not being included in the installer. On 8/21/07, J P [EMAIL PROTECTED] wrote: Hi, I do not see a UNISTIM plug-in in the

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Guy Harris
J P wrote: I do not see a UNISTIM plug-in in the C:\Program Files\Wireshark\plugins\0.99.7-SVN-22562 directory or an updated RUDP.DLL file. Does one have to do something specific to enable or download the UNISTIM decoder? I am running Version 0.99.7-SVN-22562 (SVN Rev 22562) Yes,

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, Ahh crap. Installers, you think you've got them all. Not so :/ Thanx, Jaap Guy Harris wrote: J P wrote: I do not see a UNISTIM plug-in in the C:\Program Files\Wireshark\plugins\0.99.7-SVN-22562 directory or an updated RUDP.DLL file. Does one have to do something specific to

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, I can tell you that it's decoded fine. A call to 2600 and a few seconds RTP with you blowing in the mic twice ;) Just give the buildbot a little time to spit out the build of revision 22563. Thanx, Jaap J P wrote: Hi, Attached is a capture file for a call made in our lab. -John

[Wireshark-dev] Win2000 Error: wireshark.exe is not a valid Win32 application

2007-08-21 Thread Greg Bell
This is what I get when I try and run my wireshark build on Windows 2000. It works fine on Windows XP and 2003. My build is based off the 0.99.6 release source. One thing I noticed was that when trying to install the Visual C++ 2005 Redistributable (during the Wireshark install), it gave a

[Wireshark-dev] First frame not in IO Graphs?

2007-08-21 Thread Stig Bjørlykke
Hi. I observe that the first frame in a capture is not showing in the IO Graphs. Is this a design feature or a bug? -- Stig Bjørlykke ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org

Re: [Wireshark-dev] First frame not in IO Graphs?

2007-08-21 Thread Luis EG Ontanon
IO graphs ignore the first frame looks much more like something in a bug report slogan than a feature description in the release notes. On 8/21/07, Stig Bjørlykke [EMAIL PROTECTED] wrote: Hi. I observe that the first frame in a capture is not showing in the IO Graphs. Is this a design

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Richard van der Hoff
J P, Sorry I don't have anything useful to add to your question, but do you think you could fix your posts to have correct In-Reply-To or References headers, such that you don't break the threading? Normally I'd post a link about fixing your exchange server, but it looks like you're using

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Thanx everyone - the new build works great for decoding UNISTIM! Is there anyway to get the UNISTIM calls to show up under STATISTICS - VOIP CALLS so that I can play back the audio? OR is there another way to play back the Audio for UNISTIM calls? Thanx again! -John

[Wireshark-dev] review_for_checkin denied: [Bug 1606] Improve preferences for Netflow

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff [EMAIL PROTECTED] has denied Andrew Feren [EMAIL PROTECTED]'s request for review_for_checkin: Bug 1606: Improve preferences for Netflow http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1606 ___ Wireshark-dev mailing list

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, Then it the unistim dissector should feed the voip call tap with relevant info. I'm not sure this can be done from a plugin. You can always get the audio by means of RTP analysis. Get all streams, pick out the stream(s) of interest, save it to an .au file and play that. Sure, the voip

[Wireshark-dev] review_for_checkin granted: [Bug 1698] Desegment Chunked HTTP Bodies

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff [EMAIL PROTECTED] has granted Mike Duigou [EMAIL PROTECTED]'s request for review_for_checkin: Bug 1698: Desegment Chunked HTTP Bodies http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1698 --- Additional Comments from Richard van der Hoff [EMAIL PROTECTED] Applied as

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Luis EG Ontanon
But for sccp and h248 (for which the dissector keeps call information on its own) other protocols are managed by a tap, mgcp is a plugin protocol but still it has its voip calls interface if the tap is found it gets tapped else it doesn't. BTW. is the code that ugly/rarely-used for this to be a

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Hi Jaap, Sorry to be kind of dense but... How do I perform RTP analysis with Wireshark so that I can: - How do I get all streams? - How do I select a stream(s) of interest? - How do I save the stream to an .au file? Thanx! John ___

[Wireshark-dev] review_for_checkin denied: [Bug 1723] Enhancement of text2cap for parsing flexibility

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff [EMAIL PROTECTED] has denied Jack Yu [EMAIL PROTECTED]'s request for review_for_checkin: Bug 1723: Enhancement of text2cap for parsing flexibility http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1723 ___ Wireshark-dev mailing list

[Wireshark-dev] review_for_checkin denied: [Bug 1723] Enhancement of text2cap for parsing flexibility

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff [EMAIL PROTECTED] has denied Jack Yu [EMAIL PROTECTED]'s request for review_for_checkin: Bug 1723: Enhancement of text2cap for parsing flexibility http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1723 ___ Wireshark-dev mailing list

[Wireshark-dev] review_for_checkin granted: [Bug 1724] [PATCH] packet-bootp.c: enhancement to decode DHCP option 249

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff [EMAIL PROTECTED] has granted Francois-Xavier Le Bail [EMAIL PROTECTED]'s request for review_for_checkin: Bug 1724: [PATCH] packet-bootp.c: enhancement to decode DHCP option 249 http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1724 --- Additional Comments from Richard

[Wireshark-dev] review_for_checkin granted: [Bug 1753] mpeg: Further improvements to the MPEG decoder

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff [EMAIL PROTECTED] has granted Shaun Jackman [EMAIL PROTECTED]'s request for review_for_checkin: Bug 1753: mpeg: Further improvements to the MPEG decoder http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1753 --- Additional Comments from Richard van der Hoff [EMAIL

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Hi Jaap, I got the audio working. Thanx so much for spear heading the Unistim decoder! -John ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

[Wireshark-dev] review_for_checkin granted: [Bug 1722] TCP reassembly missing payload of FIN packet, when DESEGMENT_UNTIL_FIN is set

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff [EMAIL PROTECTED] has granted yin sun [EMAIL PROTECTED]'s request for review_for_checkin: Bug 1722: TCP reassembly missing payload of FIN packet, when DESEGMENT_UNTIL_FIN is set http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1722 --- Additional Comments from Richard

Re: [Wireshark-dev] JXTA dissector memory leak?

2007-08-21 Thread Jeff Morriss
Andrej Mikus wrote: On Wed, 28.Mar.07 16:41:59 -0700, Stephen Fisher wrote: The dissector file packet-jxta.c has a comment saying that an allocation is a memory leak: if (NULL != found_addr) { found_addr-type = AT_URI; found_addr-len = strlen(*current_token); /* FIXME

Re: [Wireshark-dev] Memory leak

2007-08-21 Thread Jeff Morriss
Didier wrote: On Thu, 19 Jul 2007 14:16:49 -0400, Jeff Morriss wrote Didier wrote: Hi, 1) It seems that since some glib 2.0 version g_mem_chunk_destroy doesn't free The docs certainly seem to indicate that the memory should actually be freed:

[Wireshark-dev] review_for_checkin requested: [Bug 1741] Privilege separation patch

2007-08-21 Thread bugzilla-request-daemon
Gerald Combs [EMAIL PROTECTED] has asked for review_for_checkin: Bug 1741: Privilege separation patch http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1741 --- Additional Comments from Gerald Combs [EMAIL PROTECTED] As Joerg suggested, simply nudge the user and point them to better

Re: [Wireshark-dev] [Fwd: [Wireshark-bugs] [Bug 1741] New: Privilege separation patch]

2007-08-21 Thread Gerald Combs
Joerg Mayer wrote: I don't mind the message (see above) but I don't like the forced drop of privs. I've modified the proposed patch to simply warn the user instead of dropping privs forcefully. ___ Wireshark-dev mailing list

Re: [Wireshark-dev] OS X and Win32 buildbots unhappy with mpeg.c

2007-08-21 Thread Guy Harris
I've checked in a change that should fix this. A couple of rules for developers: 1) If you're doing 64-bit arithmetic, and assigning the result to a 32-bit quantity: 1) make sure that either the result will always fit in 32 bits, you check for results that don't fit

Re: [Wireshark-dev] OS X and Win32 buildbots unhappy with mpeg.c

2007-08-21 Thread Guy Harris
On Aug 21, 2007, at 8:34 PM, Maynard, Chris wrote: There is still a problem compiling packet-mpeg-pes.c. Similar code, same problem, same fix checked in. ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org