Re: [Wireshark-dev] writing non-Ethernet pcapng files

2009-05-22 Thread Michael Tüxen
Hi Aaron, thanks for the fix. I have committed it (with whitespace changes). Best regards Michael On May 22, 2009, at 12:48 AM, Aaron Turner wrote: Looks like there was a bug where WTAP codes weren't being properly converted to DLT types and since ethernet == ethernet, that worked, but most

Re: [Wireshark-dev] writing non-Ethernet pcapng files

2009-05-22 Thread Tyson Key
Hi. Out of interest, are there supposed to be issues with Ethernet Pcap-NG files/packets appended to other Pcap-NG files generated with Wireshark 1.0.7 having an unrecognised link type in later (SVN) versions of Wireshark? At the same time, it seems that 1.0.7 has issues reading packets in Pcap-NG

Re: [Wireshark-dev] how do I know that a new capture has been started

2009-05-22 Thread wsgd
Thanks for all answers, Olivier Stephen Fisher a écrit : On Thu, May 21, 2009 at 05:23:52PM +0200, wsgd wrote: Into a plugin dissector, how do I know that : - a new capture has been started - a new file is loaded reset callback of register_tap_listener ? other possibilities ? Can

Re: [Wireshark-dev] Next releases

2009-05-22 Thread Jeff Morriss
Peter Harris wrote: On Fri, May 15, 2009 at 2:27 PM, Gerald Combs wrote: Next week I plan on releasing 1.2.0rc1 and 1.0.8. The 1.2.0rc1 release will include creating a /trunk-1.2 branch in SVN. If you need me to postpone the branch or release, please let me know. I've started working on

Re: [Wireshark-dev] Warning/error messages when running Wireshark

2009-05-22 Thread Jeff Morriss
Stephen Fisher wrote: On Thu, May 21, 2009 at 07:32:49AM +0200, Joerg Mayer wrote: In there is also a warning message by dumpcap that seems quite unnecessary (useless?) to me - at least when I run wireshark with the -r option. That may be something to be done before 1.2. Is it this

Re: [Wireshark-dev] writing non-Ethernet pcapng files

2009-05-22 Thread Michael Tüxen
Hi Tyson, 1.0.7 does only support one section header and one interface header at the beginning of the pcapng file. The current svn version, allows one section header at the beginning and multiple interface headers, but not multiple sections headers. Basically, Wireshark (the svn version) can

Re: [Wireshark-dev] writing non-Ethernet pcapng files

2009-05-22 Thread Tyson Key
Hi Michael. Thanks for clarifying that for me. On Fri, May 22, 2009 at 3:30 PM, Michael Tüxen michael.tue...@lurchi.franken.de wrote: Hi Tyson, 1.0.7 does only support one section header and one interface header at the beginning of the pcapng file. The current svn version, allows one

Re: [Wireshark-dev] Next releases

2009-05-22 Thread Peter Harris
On Fri, May 22, 2009 at 8:55 AM, Jeff Morriss wrote: Peter Harris wrote: Is there any chance of applying the patch in https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2981 (X11 extension dissection support) for 1.2? I was reviewing that for a while but have had virtually no time of late