Re: [Wireshark-dev] For TShark, provide a way to control the output format. E.g., 'tshark -e ip udp tcp.port' would expand the IP and UDP sections, and display the TCP port information.

2011-09-15 Thread Guy Harris
On Sep 13, 2011, at 4:05 PM, Yee Man Bergstrom wrote: From http://wiki.wireshark.org/WishList For TShark, provide a way to control the output format. E.g., 'tshark -e ip udp tcp.port' would expand the IP and UDP sections, and display the TCP port information. This is already done in

[Wireshark-dev] Can't compile latest trunk

2011-09-15 Thread Yosi Saggi
I have updated via SVN my wireshark code files, When trying to verify the tools with: nmake -f Makefile.nmake verify_tools I get the following: C:\wireshark_1_6nmake -f Makefile.nmake verify_tools Microsoft (R) Program Maintenance Utility Version 9.00.30729.01 Copyright (C) Microsoft

Re: [Wireshark-dev] Can't compile latest trunk

2011-09-15 Thread Ed Beroset
Yosi Saggi wrote: Can't find: bison flex unzip wget ERROR: These application(s) are either not installed or simply can't be found in the current PATH: /cygdrive/c/Python26:/cygdrive/c/Program [...] For additional help, please visit:

Re: [Wireshark-dev] Can't compile latest trunk

2011-09-15 Thread Yosi Saggi
I have cygwin installed on my computer. Until now I had no problem compiling my old dissector (using the 1.4 trunk and some changes of mine). My problem is after I have updated the code file Yosi -Original Message- From: wireshark-dev-boun...@wireshark.org

Re: [Wireshark-dev] For TShark, provide a way to control the output format. E.g., 'tshark -e ip udp tcp.port' would expand the IP and UDP sections, and display the TCP port information.

2011-09-15 Thread Chris Maynard
Guy Harris guy@... writes: On Sep 13, 2011, at 4:05 PM, Yee Man Bergstrom wrote: From http://wiki.wireshark.org/WishList For TShark, provide a way to control the output format. E.g., 'tshark -e ip udp tcp.port' would expand the IP and UDP sections, and display the TCP port information.

Re: [Wireshark-dev] Can't compile latest trunk

2011-09-15 Thread Bill Meier
On 9/15/2011 9:06 AM, Yosi Saggi wrote: I have updated via SVN my wireshark code files, When trying to verify the tools with: nmake -f Makefile.nmake verify_tools C:\wireshark_1_6nmake -f Makefile.nmake verify_tools Microsoft (R) Program Maintenance Utility Version 9.00.30729.01 Copyright

Re: [Wireshark-dev] Can't compile latest trunk

2011-09-15 Thread Bill Meier
On 9/15/2011 9:44 AM, Bill Meier wrote: I'm not sure why verify_tools says can't find ... However, the above error message about current_tag.txt being incorrect means that the various libraries for Windows (GTK etc) aren't up-to-date. I suggest fixing this known error first by doing an

Re: [Wireshark-dev] Can't compile latest trunk

2011-09-15 Thread Bill Meier
On 9/15/2011 9:06 AM, Yosi Saggi wrote: I have updated via SVN my wireshark code files, When trying to verify the tools with: nmake -f Makefile.nmake verify_tools I get the following: C:\wireshark_1_6nmake -f Makefile.nmake verify_tools Microsoft (R) Program Maintenance Utility Version

Re: [Wireshark-dev] Can't compile latest trunk

2011-09-15 Thread Yosi Saggi
Your correct :) I have checked again and found out I don't have them in my cygwin. Apperantly when I installed it again not so long ago it didn't add the bison, flex, unzip and wget. At least I kept the old one too and copied them into the new :) Thanks Yosi -Original Message- From:

Re: [Wireshark-dev] For TShark, provide a way to control the output format. E.g., 'tshark -e ip udp tcp.port' would expand the IP and UDP sections, and display the TCP port information.

2011-09-15 Thread Guy Harris
On Sep 15, 2011, at 6:39 AM, Chris Maynard wrote: But the -e option isn't valid without -T fields, so that implies that -T fields was erroneously omitted in the wish list request, does it not? No. It could also imply that they wanted to have the -e option also work with -T, but, in the

Re: [Wireshark-dev] Ready to remove all non-ui-manager code?

2011-09-15 Thread Chris Maynard
Joerg Mayer jmayer@... writes: would it be OK to remove the non-UI-MANAGER code in gtk/? I haven't seen any ongoing work in that area, so what (if anything) is missing from the UI-MANAGER codebase? The only things that come to my mind are the proto_help stuff and the gtkvumeter stuff. The

Re: [Wireshark-dev] Ready to remove all non-ui-manager code?

2011-09-15 Thread Anders Broman
Chris Maynard skrev 2011-09-15 21:13: Joerg Mayerjmayer@... writes: would it be OK to remove the non-UI-MANAGER code in gtk/? I haven't seen any ongoing work in that area, so what (if anything) is missing from the UI-MANAGER codebase? The only things that come to my mind are the proto_help

[Wireshark-dev] Capture filter

2011-09-15 Thread Tharaneedharan Vilwanathan
Hi All, I have a quick question on capture filter. I use named pipe to pass the packets to tshark. With a capture filter, I tried to (a) store packets, (b) display and (c) store and display the packets. $ tshark -i pipe_to_tshark -w test.pcap -f 'udp port 1900' $ tshark -i pipe_to_tshark -S -f

[Wireshark-dev] How Do i disable the build of TAP and unnecessary dissector?

2011-09-15 Thread lookfar
Dear Friends:my version is wireshark-1.7.0-SVN-38520.I had tried 1.removing some lines from Makefile.common,2.commenting some lines in register.cbut,unsuccess.Maybe i just finished part work,not all,so failed.Please give me a total plan to build a fast and small