Re: [Wireshark-dev] Question concerning some specific protocol...

2006-09-30 Thread Jaap Keuter
Hi, Ahhh, now it's getting simple. Just create a heuristic dissector for your proprietary protocol. It DOES work by recognition of (part of) content. For RTP you'll have to enable the preference "Try to decode RTP outside of conversations". You can look in the RTP dissector how it's done and use t

Re: [Wireshark-dev] view filter bug

2006-09-30 Thread Brian Vandenberg
Before I write this up, I just wanted to confirm there isn't a workaround for this problem, or it isn't a misunderstanding of some sort. Normally you can type 'http' into the view filter and you'll only see http packets. However, if the http dissector operates on packets handed to it by th

Re: [Wireshark-dev] Invitation to discuss possible dissector for SCSI-OSD

2006-09-30 Thread ronnie sahlberg
I have checked in a fix for the header digest detection so it should work now also for data in/out packets it was simply that when trying to detect whether header digests were used or not it assumed that all headers are always 48 bytes and forgot to take into account the AHS. this is fixed

Re: [Wireshark-dev] Invitation to discuss possible dissector for SCSI-OSD

2006-09-30 Thread ronnie sahlberg
Hi, There is an initial dissector for SCSI OSD in current SVN that dissects some CDBs. While implementing this i uncovered some flaws with the iscsi dissector that did not handle AHS properly, but it should work now. There is still a bug in the iscsi dissector where it fails to automatically

Re: [Wireshark-dev] Question concerning some specific protocol...

2006-09-30 Thread Tobias Erichsen
The problem is that the port is not fix - the protocol(s) may run on any ports. Are protocols that are recognized automatically by Wireshark always recognized by the port, not be the content of the datagrams? I know that I can go on a sniffed packet and say "decode as" selecting the protocol manu

[Wireshark-dev] [PATCH] plugins/rdm: Update to ANSI E1.20-2006

2006-09-30 Thread Shaun Jackman
The RDM protocol has been accepted as ANSI standard E1.20-2006. The following patch updates the decoder to that spec. Please apply. Cheers, Shaun 2006-09-30 Shaun Jackman <[EMAIL PROTECTED]> * plugins/rdm/moduleinfo.h (VERSION): Bump to 0.1.0. * plugins/rdm/packet-rdm.c: Updat

Re: [Wireshark-dev] Question concerning some specific protocol...

2006-09-30 Thread Jaap Keuter
Hi, Well that is simple then. Register your proprietary dissector for the UDP port. If it's your protocol dissect it, otherwise hand it over to the RTP dissector. Thanx, Jaap On Sat, 30 Sep 2006, Tobias Erichsen wrote: > Hi everyone, > > I have used Ethereal/Wireshark for some time now, and I w

Re: [Wireshark-dev] [Patch] s/asn2eth.py/asn2wrs.py/g inasn1/umts_rrc*/Makefile

2006-09-30 Thread Anders Broman
Checked in. Brg Anders -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Reinhard Speyerer Skickat: den 30 september 2006 16:15 Till: wireshark-dev@wireshark.org Ämne: [Wireshark-dev] [Patch] s/asn2eth.py/asn2wrs.py/g inasn1/umts_rrc*/Makefile The attached pa

[Wireshark-dev] [Patch] s/asn2eth.py/asn2wrs.py/g in asn1/umts_rrc*/Makefile

2006-09-30 Thread Reinhard Speyerer
The attached patch updates asn1/umts_rrc*/Makefile for the renamed asn2eth.py -> asn2wrs.py. Regards, Reinhard umts-rrc-makefile-asn2wrs-patch.gz Description: GNU Zip compressed data ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://ww

[Wireshark-dev] Question concerning some specific protocol...

2006-09-30 Thread Tobias Erichsen
Hi everyone, I have used Ethereal/Wireshark for some time now, and I would like to contribute by developing a protocol-plugin for a combination of a proprietary and an open protocol based on RTP... Both protocols run on the sample UDP port-pair tuple. The proprietary protocol can be detected very

Re: [Wireshark-dev] [Wireshark-commits] rev 19372: /trunk/ /trunk/: Makefile.nmake

2006-09-30 Thread Anders Broman
Hi, It will have to wait untill Monday... Anders -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Ulf Lamping Skickat: den 30 september 2006 10:57 Till: Developer support list for Wireshark Ämne: Re: [Wireshark-dev] [Wireshark-commits] rev 19372: /trunk/ /tru

Re: [Wireshark-dev] [Wireshark-commits] rev 19372: /trunk/ /trunk/: Makefile.nmake

2006-09-30 Thread Ulf Lamping
Anders Broman wrote: > Hi, > On my Windows2000 machine at work I get a syntax error from that line... > (Not on the XP one at home though). > I don't have a Win2000 machine to test. Could you try if removing the /d helps? Regards, ULFL ___ Wireshark-

Re: [Wireshark-dev] [Wireshark-commits] rev 19372: /trunk/ /trunk/: Makefile.nmake

2006-09-30 Thread Anders Broman
Hi, On my Windows2000 machine at work I get a syntax error from that line... (Not on the XP one at home though). Best regards Anders -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För [EMAIL PROTECTED] Skickat: den 30 september 2006 02:45 Till: wireshark-commi