Re: [Wireshark-dev] accessing multiple occurrences of the same field with lua

2013-03-09 Thread Cristian Constantin
cristian: if I need tag as a number I should use: tonumber (tostring (tag)) right? On 8 Mar 2013 22:17, Hadriel Kaplan hkap...@acmepacket.com wrote: On Mar 8, 2013, at 6:40 AM, Cristian Constantin const.cr...@googlemail.com wrote: cristian: thanks a lot tony and hadriel. it works. otoh I

Re: [Wireshark-dev] tshark option for reassembled fragment output

2013-03-09 Thread Evan Huus
On Sat, Mar 9, 2013 at 12:27 AM, Hadriel Kaplan hkap...@acmepacket.com wrote: On Mar 8, 2013, at 6:20 PM, Jeff Morriss jeff.morriss...@gmail.com wrote: Note that someone did find a use case for not saving those dependencies: for when Wireshark got the dependencies wrong (due to, in that

[Wireshark-dev] Adding endianness to FT_BYTES for display purposes?

2013-03-09 Thread Evan Huus
I'm a bit conflicted about this one. On one hand, the use case seems valid; on the other it goes against the grain to give a raw byte array an endianness. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7933 I'm curious what other people think of this one. Thanks, Evan

Re: [Wireshark-dev] accessing multiple occurrences of the same field with lua

2013-03-09 Thread Hadriel Kaplan
On Mar 9, 2013, at 3:41 AM, Cristian Constantin const.cr...@googlemail.com wrote: cristian: if I need tag as a number I should use: tonumber (tostring (tag)) right? You can do it that way - but looking at the C-code it looks like you can also just do this: local myval = tag.value

Re: [Wireshark-dev] Wireshark GUI filter control from external applications.

2013-03-09 Thread Lee Brooks
Hi, Okay, I've tried creating a Wireshark Lua plugin however I'm unable to keep a thread open in the background to change the GUI-filter without blocking the Wireshark main thread. I've even tried creating a separate Lua thread which doesn't work either. The other option that I have investigated

[Wireshark-dev] Project Idea

2013-03-09 Thread Jay Nahata
Hi, I am Jayvardhan Nahata, a graduate student pursuing Master's in Information Security at Carnegie Mellon University. As a part of the course curriculum for the Forensics Track taught by Josh Hammerstein, Greg Longo,Ryan Shaw,I have to make a project pertaining to Forensics.I was

[Wireshark-dev] r48218: Remove the emem slab feature

2013-03-09 Thread Jakub Zawadzki
Hi Evan, - We weren't doing anything with the emem slab that couldn't be done with glib slices. Right now no, but there was implementation of sl_free_all(). - Glib slices are much cache-friendlier Do you have any benchmarks/ cachegrind output to proof it? It's quite normal use to iterate

Re: [Wireshark-dev] Project Idea

2013-03-09 Thread Jaap Keuter
Hi, You can always look through the enhancement requests in the bug database or take a peek at the wiki's wishlist. Thanks, Jaap On 03/09/2013 04:30 AM, Jay Nahata wrote: Hi, I am Jayvardhan Nahata, a graduate student pursuing Master's in Information Security at Carnegie Mellon

Re: [Wireshark-dev] r48218: Remove the emem slab feature

2013-03-09 Thread Evan Huus
On Sat, Mar 9, 2013 at 3:48 PM, Jakub Zawadzki darkjames...@darkjames.pl wrote: Hi Evan, - We weren't doing anything with the emem slab that couldn't be done with glib slices. Right now no, but there was implementation of sl_free_all(). Granted, but I don't (off the top of my head) have a

Re: [Wireshark-dev] Wireshark GUI filter control from external applications.

2013-03-09 Thread Hadriel Kaplan
On Mar 8, 2013, at 10:49 AM, Lee Brooks lee.brooks.in...@gmail.commailto:lee.brooks.in...@gmail.com wrote: Okay, I've tried creating a Wireshark Lua plugin however I'm unable to keep a thread open in the background to change the GUI-filter without blocking the Wireshark main thread. I've even