Re: [Wireshark-dev] wireshark capture/filtering question

2020-11-20 Thread Guy Harris
On Nov 20, 2020, at 11:02 AM, John Dill wrote: > Not exactly. What I'm looking to do is to merge our existing 1553 capture > C code and wireshark capture code (inspired from tshark or dumpcap) into > the same application. > > The 1553 data part would get passed records as is over a TCP socket t

Re: [Wireshark-dev] wireshark capture/filtering question

2020-11-20 Thread Guy Harris
On Nov 20, 2020, at 6:48 AM, John Dill wrote: > I've had some recent discussions about adding some network capture to our > avionics data capture dashboard program. Currently, the architecture uses a > Java program as the GUI and a TCP socket interface for playback/record > control and data w

Re: [Wireshark-dev] Tshark closing unexpectedly due to failure reading from file

2020-11-20 Thread Alastair Scott
Thanks Guy! I tested your fix myself and it solved my problem. Regards, Alastair On Fri, Nov 20, 2020 at 12:37 AM Guy Harris wrote: > On Nov 19, 2020, at 9:07 PM, Alastair Scott wrote: > > > Do you know where in the code base I could look for a potential remedy > to this issue? I'm trying to

Re: [Wireshark-dev] Windows build - all_guides fails on .chm files

2020-11-20 Thread Gerald Combs
We currently create a .chm on Windows because a) that's what we've traditionally done, b) it lets us jump to a specific place in the documentation from the main UI, and c) it's searchable. docbook/README.adoc mentions WebHelp, PDF, and Qt Help as possible alternatives to HTML Help. We could also

Re: [Wireshark-dev] wireshark capture/filtering question

2020-11-20 Thread John Dill
>From: Graham Bloice >To: Developer support list for Wireshark >Subject: Re: [Wireshark-dev] wireshark capture/filtering question >Message-ID: > >Content-Type: text/plain; charset="utf-8" > >On Fri, 20 Nov 2020 at 14:49, John Dill wrote: > >> I've had some recent discussions about addin

Re: [Wireshark-dev] Compile fails after fetch

2020-11-20 Thread Mora, Jorge
Hello, Here is the information: [mora@netapp-21 wireshark-build]$ cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.4 (Maipo) [mora@netapp-21 wireshark-build]$ uname -a Linux netapp-21 4.13.0-rc5+ #1 SMP Tue Aug 15 12:49:30 MDT 2017 x86_64 x86_64 x86_64 GNU/Linux [mora@netapp-21

Re: [Wireshark-dev] wireshark capture/filtering question

2020-11-20 Thread Graham Bloice
On Fri, 20 Nov 2020 at 14:49, John Dill wrote: > I've had some recent discussions about adding some network capture to our > avionics data capture dashboard program. Currently, the architecture uses > a Java program as the GUI and a TCP socket interface for playback/record > control and data wit

[Wireshark-dev] wireshark capture/filtering question

2020-11-20 Thread John Dill
I've had some recent discussions about adding some network capture to our avionics data capture dashboard program. Currently, the architecture uses a Java program as the GUI and a TCP socket interface for playback/record control and data with a C program capturing 1553 data. The C program has

Re: [Wireshark-dev] Windows update on development version

2020-11-20 Thread Graham Bloice
On Fri, 20 Nov 2020 at 10:32, Dario Lombardo wrote: > Hi, > I'm not that used to builds on windows, then maybe what happened is > perfectly normal. > I fired up a dev version of wireshark and suddenly wireshark asked me if I > wanted to update to a newer version. I have no idea of what would have

[Wireshark-dev] Windows update on development version

2020-11-20 Thread Dario Lombardo
Hi, I'm not that used to builds on windows, then maybe what happened is perfectly normal. I fired up a dev version of wireshark and suddenly wireshark asked me if I wanted to update to a newer version. I have no idea of what would have happened if I accepted. Shouldn't updates be disabled on builde

Re: [Wireshark-dev] Tshark closing unexpectedly due to failure reading from file

2020-11-20 Thread Guy Harris
On Nov 20, 2020, at 1:18 AM, James Ko wrote: > I just have one question about the fix.. Is it okay to send multiple SP_FILE > indications on the same file? No. The current version of the merge request only sends one. > If the pcapng stream inserts a new SHB to start a new section does dumpcap

Re: [Wireshark-dev] Tshark closing unexpectedly due to failure reading from file

2020-11-20 Thread James Ko
Thanks Guy. That was my analysis since my last email as well. I just hadn't come up with a fix. ;-) I just have one question about the fix.. Is it okay to send multiple SP_FILE indications on the same file? If the pcapng stream inserts a new SHB to start a new section does dumpcap restart with a

Re: [Wireshark-dev] Tshark closing unexpectedly due to failure reading from file

2020-11-20 Thread Guy Harris
On Nov 19, 2020, at 9:07 PM, Alastair Scott wrote: > Do you know where in the code base I could look for a potential remedy to > this issue? I'm trying to find a place to add a delay to ensure the read does > not come early. What needs to be delayed is the sending of the SP_FILE message from d