Re: [Wireshark-dev] Custom MAC layer dissector

2009-08-28 Thread Patrick Lannigan
We have a tool in place that can write the packets to the libpcap file format. On Thu, Aug 27, 2009 at 7:57 PM, Guy Harris g...@alum.mit.edu wrote: On Aug 27, 2009, at 10:47 AM, Patrick Lannigan wrote: The dissector I'm writing is a custom link layer protocol. By link layer, do you mean

[Wireshark-dev] Is there a way to get a tcp sequence number from my plugin?

2009-08-28 Thread Saad Nader
Hello, I'm dissecting a protocol that doesn't have a good message structure. This protocol is a TCP based protocol. There is no packet header that tells me what type of message I have. I've been using a conversation and state data to keep track but that also has issues when viewing previous

Re: [Wireshark-dev] Port Expert info changes to 1.2.2? -Significant performance improvement.

2009-08-28 Thread Balint Reczey
Hi, I think we should stay with the current policy of adding only bugfixes to the stable branch. The next development snapshot is scheduled to be released in Q4, 2009 [1] and this enhancement could be distributed in the snapshot. In Debian, there is an ongoing discussion about allowing whole

[Wireshark-dev] Regarding EcDoRpc MAPI Request Subcontent Size Feld

2009-08-28 Thread Soumitra Banerjee
Hi all, I'm using Wireshark version 1.2.1 in Ubuntu 9.04 machine. I've taken some of the captures while communicating my organization's Exchange Server 2007. In all the captures for MAPI EcDoRpc Request packets, there is a chunk of data that is pointed out by a field *SubContent Data Size*, and

[Wireshark-dev] Plugin Directory Subdirectories

2009-08-28 Thread Susan Ditmore
Hello, While attempting to build my plugin on windows, I encountered file not found errors during the nmake all call. Once I flattened the directory structure within the plugin, these problems went away (presumably because windows was no longer getting confused about the / \ differences on the

Re: [Wireshark-dev] rev 28759: /trunk/ /trunk/: CMakeLists.txt

2009-08-28 Thread Kovarththanan Rajaratnam
Hey, jma...@wireshark.org wrote: http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=revrevision=28759 User: jmayer Date: 2009/06/15 10:37 PM Log: Build the other tools that don't depend on libwireshark (editcap, capinfo, text2pcap, mergecap). I've just tried this and I'm getting the

Re: [Wireshark-dev] Custom MAC layer dissector

2009-08-28 Thread Guy Harris
On Aug 28, 2009, at 6:08 AM, Patrick Lannigan wrote: We have a tool in place that can write the packets to the libpcap file format. ...which means that either: 1) you've chosen an existing DLT_ value to use in the file header; 2) you've requested a DLT_ value from

Re: [Wireshark-dev] Need help in Decoding RTP Multiplex streams inWireshark

2009-08-28 Thread Neil Piercy
Hi, ip.access have developed a basic dissector for this protocol which we will happily add to the project - I'll raise a bug report and attach the file. At present it only handles the uncompressed RTP header case, but should provide a starting point for further development. BTW we have

Re: [Wireshark-dev] [Wireshark-commits] rev 29589: /trunk/ /trunk/: CMakeLists.txt

2009-08-28 Thread Joerg Mayer
On Fri, Aug 28, 2009 at 06:17:08PM +0200, Kovarththanan Rajaratnam wrote: Having said that, I probably won't loose any sleep over this ;) Let me know if you think I should revert this change. I was just curious. Btw, are you planning on working on more CMake stuff in the near future? I'm

Re: [Wireshark-dev] Is there a way to get a tcp sequence number from my plugin?

2009-08-28 Thread Stephen Fisher
On Aug 27, 2009, at 3:59 PM, Saad Nader wrote: I’m dissecting a protocol that doesn’t have a good message structure. This protocol is a TCP based protocol. There is no packet header that tells me what type of message I have. I’ve been using a conversation and state data to keep track

Re: [Wireshark-dev] [Wireshark-commits] rev 29589: /trunk/ /trunk/: CMakeLists.txt

2009-08-28 Thread Kovarththanan Rajaratnam
Hey, Joerg Mayer wrote: On Fri, Aug 28, 2009 at 06:17:08PM +0200, Kovarththanan Rajaratnam wrote: Better you than me ;-) If I find the time, I'll fix one problem that currently prevents a cmake based build on linux this weekend - additional stuff will have to wait for at least one more

[Wireshark-dev] Autogen.sh error on ubuntu

2009-08-28 Thread Swapnil Barai (sbarai)
Hi I am trying to build the latest development source code of Wireshark on ubuntu. I have installed Automake, Autoconf and libtool all in /usr/local (using ./configure --prefix=/usr/local/ and make and make install) . Thus my aclocal and aclocal-1.10 directories are present in

Re: [Wireshark-dev] Autogen.sh error on ubuntu

2009-08-28 Thread Guy Harris
On Aug 28, 2009, at 12:12 PM, Swapnil Barai (sbarai) wrote: I am trying to build the latest development source code of Wireshark on ubuntu. I have installed Automake, Autoconf and libtool all in / usr/local (using ./configure --prefix=/usr/local/ and make and make install) . There

Re: [Wireshark-dev] Autogen.sh error on ubuntu

2009-08-28 Thread Guy Harris
On Aug 28, 2009, at 12:28 PM, Swapnil Barai (sbarai) wrote: That's true. However as mentioned on http://wiki.wireshark.org/BuildingAndInstalling I wanted to install automake in the same prefix as libtool. Sudo apt-get install automake was putting it in a diff dir. That item applies only if

Re: [Wireshark-dev] Autogen.sh error on ubuntu

2009-08-28 Thread Swapnil Barai (sbarai)
Ok, I can reinstall the packages using apt-get if it makes difference. The output of sh -x ./aclocal-flags : + aclocal --print-ac-dir + aclocal_dir=/usr/local/share/aclocal + pkg-config --variable=prefix glib-2.0 + glib_prefix=/usr + [ -z /usr ] + glib_aclocal_dir=/usr/share/aclocal + dirname

Re: [Wireshark-dev] Autogen.sh error on ubuntu

2009-08-28 Thread Guy Harris
On Aug 28, 2009, at 1:04 PM, Swapnil Barai (sbarai) wrote: Ok, I can reinstall the packages using apt-get if it makes difference. I'd do a make uninstall of all the autotools you installed from source, and then install them with apt-get, and see whether that works. + pkg-config

[Wireshark-dev] buildbot failure in Wireshark (development) on OSX-10.5-x86

2009-08-28 Thread buildbot-no-reply
The Buildbot has detected a new failure of OSX-10.5-x86 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/OSX-10.5-x86/builds/3290 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: osx-10.5-x86 Build Reason:

Re: [Wireshark-dev] How to submit a dissector code?

2009-08-28 Thread Anders Broman
Hi, Patches are to be submitted here http://bugs.wireshark.org/ Whether your dissector should replace the built in one (e.g. has to be “unplugified”) depends on which one Would be “best for the future” e.g. moste complete, easy to extend and maintain and adhering to Wireshark coding style.

[Wireshark-dev] buildbot failure in Wireshark (development) on OSX-10.5-ppc

2009-08-28 Thread buildbot-no-reply
The Buildbot has detected a new failure of OSX-10.5-ppc on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/OSX-10.5-ppc/builds/1871 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: osx-10.5-ppc Build Reason: