[Wireshark-dev] Benjamin M Stocks/NorthAmerica/RA/Rockwell is out of the office.

2006-09-21 Thread Benjamin M Stocks
I will be out of the office starting 09/22/2006 and will not return until 10/09/2006. I will be out of the office starting Friday September 22nd and returning Monday October 9th. If this is an urgent matter in regards to the Kinetix CIP project contact David van Dorpe, all other urgent matters sh

Re: [Wireshark-dev] Is it possible to add the actual data (80 bytes) to the proto tree in a chunk?

2006-09-21 Thread Jaap Keuter
Hi, How about feeding the data to the data dissector? Create a sub_tvb from the current offset to the end of the frame (assuming the data is at the end) and hand that to the data dissector. Lots of samples in other dissectors. Thanx, Jaap On Thu, 21 Sep 2006, Bill Fassler wrote: > Ya know how t

Re: [Wireshark-dev] Portability issue of capture files.

2006-09-21 Thread Stephen Fisher
On Thu, Sep 07, 2006 at 10:19:22AM +0200, Andreas Fink wrote: > Ok. so we spotted a real bug. is this one in libwiretap? I don't > think so as libwiretrap is the same as when I tried it before. I am experiencing a variation of this zlib problem on OS X. I first posted about the problem in Jul

[Wireshark-dev] Debugging in a win32 environment

2006-09-21 Thread Brian Vandenberg
I have a license for VS6, VS7, and VS8. I can only compile with VS6, but I've found I can debug with VS8 which has a much nicer debug interface than VS6, but VS8 tells me the symbols compiled into wireshark's DLLs are in an obsolete format -- which means I can't add breakpoints to files outs

Re: [Wireshark-dev] question(s) on the use of heur_dissector_add

2006-09-21 Thread Brian Vandenberg
> BTW, does your protocol (which I assume runs atop HTTP) have a > Content-Type (media type) value associated with it? If so, you might > want to register that media type in the "media_type" string dissector > table. > Yes. I did some toying around today with that and got it working by ju

[Wireshark-dev] Linking with archive libraries in hp-ux

2006-09-21 Thread Sakeeb S
Hi All, I am new to this mailing list. I am trying to build wireshark (0.99.3) on hp-ux (Itanium m/c). I want wireshark to link with archive libraries rather than shared libraries. So I have following option while configuring. export LD_LIBRARY_PATH=/usr/local/lib/hpux32 export LDFLAGS="-Wl,+nod

Re: [Wireshark-dev] Should we check value_strings for NULL termination while registering?

2006-09-21 Thread Jeff Morriss
Ulf Lamping wrote: > Gilbert Ramirez wrote: >> I believe we do this in the build-bot testing, by doing: >> >> tshark -G values >> >> Since that operation iterates across all the value_string arrays, a >> non-terminated array will result in an error or at least it >> should. >> >> Is that eno

Re: [Wireshark-dev] Why is AUTHORS-SHORT-FORMAT installed with the Win32 installer?!?

2006-09-21 Thread Guy Harris
On Sep 21, 2006, at 3:13 PM, Ulf Lamping wrote: > That was added by Guy in 12334 I was just checking in Graham Hewson's patch: http://www.ethereal.com/lists/ethereal-dev/200410/msg00258.html That patch includes the change to the .nsi file. > but I don't see any reason to include > th

Re: [Wireshark-dev] Ethereal 0.10.11 vs WireShark 0.99.3

2006-09-21 Thread Ulf Lamping
Bill Fassler wrote: > Now that the test and debug team are using my plugin they had to > switch from Ethereal to Wireshark and they are complaining because > Ethereal seems to remember (saves) the settings and preferences for > capture options and they all have to reset them manually every time

[Wireshark-dev] "Firewall ACL Rules" needs a better User's Guide explanation

2006-09-21 Thread Ulf Lamping
Hi List! The current description of the rules are unfortunately "virtually none existing": "This allows you to create command-line ACL rules for many different firewall products, including Cisco IOS, Linux Netfilter (iptables), OpenBSD pf and Windows Firewall (via netsh). Rules for MAC address

[Wireshark-dev] Ethereal 0.10.11 vs WireShark 0.99.3

2006-09-21 Thread Bill Fassler
Now that the test and debug team are using my plugin they had to switch from Ethereal to Wireshark and they are complaining because Ethereal seems to remember (saves) the settings and preferences for capture options and they all have to reset them manually every time they launch Wireshark.Why doesn

Re: [Wireshark-dev] fopen vs. eth_fopen

2006-09-21 Thread Andrew Feren
--- Ulf Lamping <[EMAIL PROTECTED]> wrote: > Shelly Cadora wrote: > > Haven't given up yet! Oh Good! Maybe you'll solve it before I finish fighting a different fire and come back to work on this problem again. ;-) > > I compiled wireshark 0.99.4 with MSVC 2005 Express, but it crashed > > eve

[Wireshark-dev] Is it possible to add the actual data (80 bytes) to the proto tree in a chunk?

2006-09-21 Thread Bill Fassler
Ya know how the first branch of the plugin tree highlights the entire packet, the header, data and everything? Well, my superiors (who is everybody in the world it seems) insist that I add a final branch that highlights the actual data packet (in this case -  an 80 byte audio packet).  Everything I

Re: [Wireshark-dev] [Patch] Re: capture from a fifo

2006-09-21 Thread Ulf Lamping
Richard van der Hoff wrote: > Richard van der Hoff wrote: >> [tshark from a fifo] >> Ulf - I notice you made the relevant change here (r16787) - is there >> any reason why tshark shouldn't use capture_loop_dispatch to do its >> processing, rather than attempting to use cap_pipe_dispatch or >> pc

Re: [Wireshark-dev] Why is AUTHORS-SHORT-FORMAT installed with the Win32 installer?!?

2006-09-21 Thread Ulf Lamping
Jaap Keuter wrote: > Hi, > > Isn't it loaded in the Authors tab of the About box? > > No, that one uses the file AUTHORS-SHORT, which is also installed "by" wireshark.nsi. See: gtk/about_dlg.c line 187. BTW: It wouldn't make a lot of sense showing a file that starts with: ---

Re: [Wireshark-dev] Should we check value_strings for NULL termination while registering?

2006-09-21 Thread Ulf Lamping
Gilbert Ramirez wrote: > I believe we do this in the build-bot testing, by doing: > > tshark -G values > > Since that operation iterates across all the value_string arrays, a > non-terminated array will result in an error or at least it > should. > > Is that enough testing? > Unsure. It can

Re: [Wireshark-dev] Why is AUTHORS-SHORT-FORMAT installed with the Win32 installer?!?

2006-09-21 Thread Jaap Keuter
Hi, Isn't it loaded in the Authors tab of the About box? Thanx, Jaap On Fri, 22 Sep 2006, Ulf Lamping wrote: > Hi List! > > That was added by Guy in 12334 but I don't see any reason to include > this in the installed Windows version. > > IMHO this is an intermediate file and it's used to create

[Wireshark-dev] Why is AUTHORS-SHORT-FORMAT installed with the Win32 installer?!?

2006-09-21 Thread Ulf Lamping
Hi List! That was added by Guy in 12334 but I don't see any reason to include this in the installed Windows version. IMHO this is an intermediate file and it's used to create the man and html pages, so it's not needed to be installed in the "end user version". Shouldn't this be removed from wi

Re: [Wireshark-dev] fopen vs. eth_fopen

2006-09-21 Thread Ulf Lamping
Shelly Cadora wrote: > Haven't given up yet! > > I compiled wireshark 0.99.4 with MSVC 2005 Express, but it crashed > every time it tried to read a file opened with eth_fopen. So I > experimented by changing all the eth_fopen calls to fopen. Now the > program runs. > > But the problem is t

[Wireshark-dev] fopen vs. eth_fopen

2006-09-21 Thread Shelly Cadora
Haven't given up yet!   I compiled wireshark 0.99.4 with MSVC 2005 Express, but it crashed every time it tried to read a file opened with eth_fopen.  So I experimented by changing all the eth_fopen calls to fopen.  Now the program runs.   But the problem is that I cannot open files!    If I

Re: [Wireshark-dev] Patch to epan/dissectors/packet-lapd.c, some-one please apply

2006-09-21 Thread Anders Broman
>Hi Jaap, >thank you for your reply. I understand your concern, so I would like to >present my view of things. >It would be best if SVN user etxrab could also comment on this, after >all her/his patch broke network/user display on ISDN captures. I just checked in a patch sent by someone else t

Re: [Wireshark-dev] Patch to epan/dissectors/packet-lapd.c, some-one please apply

2006-09-21 Thread Rolf Fiedler
Hi Jaap, thank you for your reply. I understand your concern, so I would like to present my view of things. It would be best if SVN user etxrab could also comment on this, after all her/his patch broke network/user display on ISDN captures. The traditional ethereal convention is that the device

Re: [Wireshark-dev] Proposal to move "Copy" on packet detail popup menu

2006-09-21 Thread Joerg Mayer
On Thu, Sep 21, 2006 at 05:59:55PM +0200, Jaap Keuter wrote: > Time and time again, I find myself looking for the "Expand Subtrees" item > in the packet detail popup menu. It used to be the top most item, until > "Copy" took that place. My proposal is to have the Most Frequently Used(tm) > item at

[Wireshark-dev] Proposal to move "Copy" on packet detail popup menu

2006-09-21 Thread Jaap Keuter
Hi, Time and time again, I find myself looking for the "Expand Subtrees" item in the packet detail popup menu. It used to be the top most item, until "Copy" took that place. My proposal is to have the Most Frequently Used(tm) item at the top, that is to move "Copy" below "Collapse all". Your thou

Re: [Wireshark-dev] [PATCH] packet-smb.c lock display

2006-09-21 Thread Jaap Keuter
Hi, Checked in, with the additional change of ett_smb_unlock -> ett_smb_lock in the next line. Clearly a copy-paste-forgot-to-modify Thanx, Jaap On Thu, 21 Sep 2006, Marco Strack wrote: > Hi, > > the smb dissector displays lock requests in the "Locking AndX Request" as a > vector of locks. It

Re: [Wireshark-dev] Patch to packet-tcp.h

2006-09-21 Thread Joerg Mayer
On Thu, Sep 21, 2006 at 09:04:31AM +0200, Peter Johansson wrote: > Oh, I see. Sorry, must have missed that before. > What Jaap writes in > http://www.ethereal.com/lists/ethereal-dev/200604/msg00097.html is true, > however IMHO I see no reason why not to fix this problem in this file > (packet-tc

[Wireshark-dev] [PATCH] packet-smb.c lock display

2006-09-21 Thread Marco Strack
Hi, the smb dissector displays lock requests in the "Locking AndX Request" as a vector of locks. It opens a tree branch "Locks" and appends the locks to this branch. Instead of adding "Lock" objects to this branch it added "Unlock" objects. Everything else is fine. Index: epan/dissectors/p

[Wireshark-dev] FW: Serious error in RFC 4590

2006-09-21 Thread Alexander Schrab
I sent a mail to the authors of RFC4590 and they claim that the table and IANA is wrong... So stick with: 106 is Digest-Response-Auth 107 is Digest-Nextnonce /Alex The response I got from Wolfgang: - Alexander > In table 2 the Digest

Re: [Wireshark-dev] Patch to packet-tcp.h

2006-09-21 Thread Peter Johansson
Oh, I see. Sorry, must have missed that before. What Jaap writes in http://www.ethereal.com/lists/ethereal-dev/200604/msg00097.html is true, however IMHO I see no reason why not to fix this problem in this file (packet-tcp.h) right now. Why let Wireshark be Windows-app-development-a-like (you h