Re: [Wireshark-dev] SMTP: Extracting parametrs

2008-04-30 Thread Stephen Fisher
On Thu, May 01, 2008 at 09:27:06AM +0300, goitom kahsay wrote: > I want to display these values(the SMTP parameters such as > FROM,TO,SUBJECT,DATE) in a *new dialog* under the analyze menu. And > the dialog displays these values from each SMTP packets displayed in > the packet list pane. If th

Re: [Wireshark-dev] SMTP: Extracting parametrs

2008-04-30 Thread goitom kahsay
Hi Stig Bjorlykke, I want to display these values(the SMTP parameters such as FROM,TO,SUBJECT,DATE) in a *new dialog* under the analyze menu. And the dialog displays these values from each SMTP packets displayed in the packet list pane. Thanks alot for you help. with best regards. On Thu,

Re: [Wireshark-dev] Decode As... Questions

2008-04-30 Thread Guy Harris
On Apr 30, 2008, at 11:05 AM, Peter Fuller wrote: > > In the past, I have come across some data that was one transport > layer carried in another (TCP carrying UDP). I.e., a byte stream containing a sequence of UDP header+payload items? (The UDP header contains a length, so that can be done w

Re: [Wireshark-dev] network names, ssid and mac adress

2008-04-30 Thread Guy Harris
On Apr 30, 2008, at 9:38 AM, Amy Chu wrote: > I'm searching for the code for where it tells the windows users the > network names, ssid and the mac address. Can someone point me to the > right files? gtk/capture_if_details_dlg_win32.c, for starters, I suspect. __

[Wireshark-dev] Decode As... Questions

2008-04-30 Thread Peter Fuller
In the past, I have come across some data that was one transport layer carried in another (TCP carrying UDP). My first inclination was to use Wireshark's 'Decode As...' option to force the port in question to continue the dissection using the next transport layer dissector. Is there a reaso

[Wireshark-dev] network names, ssid and mac adress

2008-04-30 Thread Amy Chu
Hi, I'm searching for the code for where it tells the windows users the network names, ssid and the mac address. Can someone point me to the right files? Amy ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailma

Re: [Wireshark-dev] SMTP: Extracting parametrs

2008-04-30 Thread Stig Bjørlykke
On 30. april. 2008, at 09.44, goitom kahsay wrote: > How can i extract the SMTP parameters such as FROM,TO,SUBJECT,DATE > and ... from SMTP packets? Hi. I don't know where you want the output, but the SMTP dissector is using the IMF dissector, so it's possible to use tshark to print the v

Re: [Wireshark-dev] Re : Re: SMTP : Copying Data into a file

2008-04-30 Thread Sébastien Tandel
Hi, I think it is relly better for you to read first the doc/README.developer and others before doing what you would like. Regards, Sebastien Tandel On Wed, Apr 30, 2008 at 3:54 PM, Auvray Julien <[EMAIL PROTECTED]> wrote: > Hello everybody!! > > I'm trying to add script to create a fil

Re: [Wireshark-dev] How to capture all IP fragments?

2008-04-30 Thread Guy Harris
Eloy Paris wrote: > I don't think that what you are trying to do can be accomplished with > capture or display filters since as you know only the first fragment > has layer 4 information that can be used by the filter, and since > filters don't keep state, then fragments other than the first can't

Re: [Wireshark-dev] How to capture all IP fragments?

2008-04-30 Thread Eloy Paris
On Wed, Apr 30, 2008 at 10:29:54AM -0400, Maynard, Chris wrote: > I must be losing my mind. I tried this several times yesterday and I > could have sworn I captured all fragments with Wireshark but not with > tcpdump using the same exact capture filter. Of course today I can't > recreate it, so

[Wireshark-dev] Re : Re: SMTP : Copying Data into a file

2008-04-30 Thread Auvray Julien
Hello everybody!! I’m trying to add script to create a file in the source “epan/dissectors/packet-smtp.c” when I send a mail. Then I have added : FILE *P_FICHIER; P_FICHIER = fopen ("data2.txt", "w"); fclose(P_FICHIER); at the beginning of the function “dissect_smtp”. And when I start w

Re: [Wireshark-dev] Byte Ordering in Dissector

2008-04-30 Thread Barry Constantine
Thanks a bunch folks!! -Barry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris Sent: Wednesday, April 30, 2008 1:41 PM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Byte Ordering in Dissector Barry Constantine wrote: >

Re: [Wireshark-dev] Byte Ordering in Dissector

2008-04-30 Thread Guy Harris
Barry Constantine wrote: > I am running into a problem because the uint32 of my protocol is not in > network byte order, but is in reverse byte order. > > How can I override the default assumption of network byte order when I > insert the uint32 into the dissector tree? You can't... ...becaus

Re: [Wireshark-dev] Byte Ordering in Dissector

2008-04-30 Thread Jeff Morriss
Barry Constantine wrote: > Hello, > > I am running into a problem because the uint32 of my protocol is not in > network byte order, but is in reverse byte order. > > How can I override the default assumption of network byte order when I > insert the uint32 into the dissector tree? If you're

[Wireshark-dev] Byte Ordering in Dissector

2008-04-30 Thread Barry Constantine
Hello, I am running into a problem because the uint32 of my protocol is not in network byte order, but is in reverse byte order. How can I override the default assumption of network byte order when I insert the uint32 into the dissector tree? Thanks! Barry ___

Re: [Wireshark-dev] ADNS alternative

2008-04-30 Thread Graham Bloice
Gerald Combs wrote: Jaap Keuter wrote: Hi list, I've stumbled upon c-ares (http://daniel.haxx.se/projects/c-ares/) as a possible replacement for ADNS, which we currently have as async DNS resolver library. Pro's: Still being developed, IPv6 support, multi-platform, MIT license. Con's: May

Re: [Wireshark-dev] ADNS alternative

2008-04-30 Thread Gerald Combs
Jaap Keuter wrote: > Hi list, > > I've stumbled upon c-ares (http://daniel.haxx.se/projects/c-ares/) as a > possible replacement for ADNS, which we currently have as async DNS resolver > library. > Pro's: Still being developed, IPv6 support, multi-platform, MIT license. > Con's: May suffer from

Re: [Wireshark-dev] Help: How to add files to Wireshark

2008-04-30 Thread Luis EG Ontanon
On unix: make clean ./autogen.sh ./configure make On windows: nmake -f Makefile.nmake clean nmake -f Makefile.nmake all On Wed, Apr 30, 2008 at 3:20 PM, goitom kahsay <[EMAIL PROTECTED]> wrote: > Hi Jaap, > > Thank you very much for every thing. > > > But the added file does not compile.

Re: [Wireshark-dev] Help: How to add files to Wireshark

2008-04-30 Thread goitom kahsay
Hi Jaap, Thank you very much for every thing. But the added file does not compile. And also it does not create any object file. Thank you in advance On Wed, Apr 30, 2008 at 11:48 AM, Jaap Keuter <[EMAIL PROTECTED]> wrote: > Hi, > > gtk/Makefile.common is the place for that. > > Thanx, >

[Wireshark-dev] GMemChunk vs g_slice ?

2008-04-30 Thread Anders Broman
Hi, Looking at deprecated glib functions http://library.gnome.org/devel/glib/stable/ix02.html I found that GMemChunk is depreciated ( from 2.10) googling a bit I found claims that it is more efficient. Is it something we should use? For reassembly? The downside is that we'd need New sets of #ifdefi

[Wireshark-dev] ADNS alternative

2008-04-30 Thread Jaap Keuter
Hi list, I've stumbled upon c-ares (http://daniel.haxx.se/projects/c-ares/) as a possible replacement for ADNS, which we currently have as async DNS resolver library. Pro's: Still being developed, IPv6 support, multi-platform, MIT license. Con's: May suffer from same memory allocation issues on

Re: [Wireshark-dev] How to capture all IP fragments?

2008-04-30 Thread Maynard, Chris
I must be losing my mind. I tried this several times yesterday and I could have sworn I captured all fragments with Wireshark but not with tcpdump using the same exact capture filter. Of course today I can't recreate it, so obviously I was doing something wrong yesterday or just wildly hallucinat

Re: [Wireshark-dev] Communication between Dissectors

2008-04-30 Thread Barry Constantine
Hello Martin, This looks like it will work and will give this a try. Thanks in advance, Barry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Peylo Sent: Tuesday, April 29, 2008 7:46 AM To: Developer support list for Wireshark Subject: Re: [Wiresh

[Wireshark-dev] buildbot failure in Wireshark (development) on Windows-XP-x86

2008-04-30 Thread buildbot-no-reply
The Buildbot has detected a new failure of Windows-XP-x86 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/Windows-XP-x86/builds/4301 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: windows-xp-x86 Build Reason: Build

[Wireshark-dev] buildbot failure in Wireshark (development) on Windows-XP-x86

2008-04-30 Thread buildbot-no-reply
The Buildbot has detected a new failure of Windows-XP-x86 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/Windows-XP-x86/builds/4299 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: windows-xp-x86 Build Reason: Build

Re: [Wireshark-dev] SMTP: Extracting parametrs

2008-04-30 Thread Jaap Keuter
Hi, Adding a tap to the SMTP dissector would be an option. Thanx, Jaap goitom kahsay wrote: > > Hi folks, > How can i extract the SMTP parameters such as FROM,TO,SUBJECT,DATE and > ... from SMTP packets? > > any idea is most welcomed. > > Thx > -- > Benice2all > _

Re: [Wireshark-dev] Help: How to add files to Wireshark

2008-04-30 Thread Jaap Keuter
Hi, gtk/Makefile.common is the place for that. Thanx, Jaap goitom kahsay wrote: > Hello All, > How can i add a file to the wireshark source code? > > Spesficaly to add a file to the* GTK* folder. > > Any idea is appriciated > > -- > Benice2all > __

[Wireshark-dev] SMTP: Extracting parametrs

2008-04-30 Thread goitom kahsay
Hi folks, How can i extract the SMTP parameters such as FROM,TO,SUBJECT,DATE and ... from SMTP packets? any idea is most welcomed. Thx -- Benice2all ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wi

[Wireshark-dev] Help: How to add files to Wireshark

2008-04-30 Thread goitom kahsay
Hello All, How can i add a file to the wireshark source code? Spesficaly to add a file to the* GTK* folder. Any idea is appriciated -- Benice2all ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wir

Re: [Wireshark-dev] SMTP : Copying Data into a file

2008-04-30 Thread goitom kahsay
Hi Sebastien, The SMTP dissector is defined @ *epan/dissectors/packet-smtp.c *But can u help me any idea on how to extract the SMTP email parameters such as *From,To,subject ,date *and from the SMTP packets Any idea is most appriciated 10Q in advance * * On Tue, Apr 29, 2008 at 7:36 PM