Re: [Wireshark-dev] [Wireshark-commits] wireshark-win64-libs rev 533: /trunk/ /trunk/packages/: GeoIP-1.6.10-win64ws.zip GeoIP-1.6.6-win64ws.zip /trunk/: README.txt

2018-11-07 Thread Gerald Combs
Those are the old GeoIP Legacy libraries, which are being sunsetted by MaxMind[1]. We still support GeoIP2 via the MaxMindDB library and will continue to do so. [1] https://dev.maxmind.com/geoip/legacy/geolite/ On 11/7/18 8:10 AM, Maynard, Chris wrote: > I was just curious if the removal of

Re: [Wireshark-dev] Its possible to build and run wireshark from IDE

2018-11-07 Thread Graham Bloice
On Wed, 7 Nov 2018 at 16:39, Tomer Bar wrote: > Hi, > I a new in wireshark development, > can you tell me if its possible to import the all source code to > eclipse?build it?debug it?and run it? > otherwise, there is any IDE that can do it? > That's not directly supported but as we use CMake to

Re: [Wireshark-dev] [Wireshark-commits] wireshark-win64-libs rev 533: /trunk/ /trunk/packages/: GeoIP-1.6.10-win64ws.zip GeoIP-1.6.6-win64ws.zip /trunk/: README.txt

2018-11-07 Thread Maynard, Chris
Yes, of course. Thanks again. - Chris From: Wireshark-dev [mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Pascal Quantin Sent: Wednesday, November 7, 2018 11:19 AM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] [Wireshark-commits] wireshark-win64-libs rev 533:

Re: [Wireshark-dev] Its possible to build and run wireshark from IDE

2018-11-07 Thread Roland Knall
Hi Wireshark is based on the meta-build system make. Therefore you can use pretty much any IDE you want to use. Personally I am using QtCreator, which works if you use "CodeBuilder - Ninja" as a cmake target and import the generated CMakeLists.txt in QtCreator. kind regards Roland Am Mi., 7.

Re: [Wireshark-dev] Decrypt encrypted eapol key data (in 802.11 4-way handshake)

2018-11-07 Thread Mikael Kanstrup
Hi, I had a look at the p_add/get_proto_data but I think I'll end up allocating data for lots of unnecessary packets as the parent dissector code does not know when data will be needed by subdissector. It seems the pinfo dl_src and dl_dst contain the info I'm after. Will try it out and see if I

Re: [Wireshark-dev] Decrypt encrypted eapol key data (in 802.11 4-way handshake)

2018-11-07 Thread Mikael Kanstrup
Hi, I've started to implement support for decrypting the eapol keydata. With an early prototype I've been able to successfully decrypt and dissect the data. Though I run into a problem where I need to access parent fields' data. In the proto_wlan_rsna_eapol dissector when encrypted data is

Re: [Wireshark-dev] Decrypt encrypted eapol key data (in 802.11 4-way handshake)

2018-11-07 Thread Pascal Quantin
Hi Mikael, Le mer. 7 nov. 2018 à 10:53, Mikael Kanstrup a écrit : > Hi, > > I've started to implement support for decrypting the eapol keydata. With > an early prototype I've been able to successfully decrypt and dissect the > data. Though I run into a problem where I need to access parent

[Wireshark-dev] Its possible to build and run wireshark from IDE

2018-11-07 Thread Tomer Bar
Hi, I a new in wireshark development, can you tell me if its possible to import the all source code to eclipse?build it?debug it?and run it? otherwise, there is any IDE that can do it? i want to expose the validation of the display filter and use it like service? any idea? Tnx, Tomer

[Wireshark-dev] failed assertion "save_desegment_offset == pinfo->desegment_offset && save_desegment_len == pinfo->desegment_len"

2018-11-07 Thread 张涛
Dear Experts, I am building my Lua plugin for Wireshark, but I got a failed assertion below: [Dissector bug, protocol TCP: /build/wireshark-rjGTDh/wireshark-2.6.3/epan/dissectors/packet-tcp.c:5591: failed assertion "save_desegment_offset == pinfo->desegment_offset &&

Re: [Wireshark-dev] [Wireshark-commits] wireshark-win64-libs rev 533: /trunk/ /trunk/packages/: GeoIP-1.6.10-win64ws.zip GeoIP-1.6.6-win64ws.zip /trunk/: README.txt

2018-11-07 Thread Maynard, Chris
I was just curious if the removal of these packages is in prepration for updated 1.6.12 packages or if GeoIP support is being removed altogether, and if that's the case, then what might be the reason for that? Thanks. - Chris -Original Message- From: Wireshark-commits

Re: [Wireshark-dev] [Wireshark-commits] wireshark-win64-libs rev 533: /trunk/ /trunk/packages/: GeoIP-1.6.10-win64ws.zip GeoIP-1.6.6-win64ws.zip /trunk/: README.txt

2018-11-07 Thread Pascal Quantin
Hi Chris, Le mer. 7 nov. 2018 à 17:11, Maynard, Chris a écrit : > I was just curious if the removal of these packages is in prepration for > updated 1.6.12 packages or if GeoIP support is being removed altogether, > and if that's the case, then what might be the reason for that? > we