Re: [Wireshark-dev] SSL + DTLS

2006-06-29 Thread ronnie sahlberg
ah, a misunderstanding. ok.so the dtls stuff does not require linking with openssl then there wont be any problem at all. thanks for clarifying. please also see wiki.wireshark.org/SSL i just checked in a change to the preference syntax that is not backward compatible for ssl decryption.

Re: [Wireshark-dev] SSL + DTLS

2006-06-29 Thread authesserre samuel
hi, in wiki you could make : Secure Socket Layer (SSL) SSL provides communication security between two hosts. It provides integrity, authentification and confidentiality. It is used most of time in web navigator but can be used for any protocol under TCP. History SSL is originally a Netscape

Re: [Wireshark-dev] [patch] Lua plugin fixes

2006-06-29 Thread LEGO
I did it a while ago. On 6/29/06, Bálint Réczey (IJ/ETH) [EMAIL PROTECTED] wrote: Hi, Could someone apply the patch to the svn repository? Regards, Balint -Original Message- From: Bálint Réczey (IJ/ETH) Sent: Tue 6/27/2006 18:24 To: wireshark-dev@wireshark.org Subject: [patch]

[Wireshark-dev] Default color filters typo

2006-06-29 Thread Stephen Fisher
The default colorfilters file in Wireshark has an entry titled IPX. It matches ipx || stp which should probably be ipx || spx. ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

[Wireshark-dev] [PATCH] NDMP config_get_auth_attr_reply missing a field

2006-06-29 Thread Aaron Christensen
Added the dissection of a field that wasn't being picked up during NDMP MD5 authentication.The NDMP_CONFIG_GET_AUTH_ATTR message response was using the function dissect_auth_attr_msg() which dissects an auth_attr struct. However, the specification includes and error field previous to that struct.

Re: [Wireshark-dev] [PATCH] NDMP config_get_auth_attr_reply missing a field

2006-06-29 Thread ronnie sahlberg
Can you check ndmp versions 2 to 5 that this is true for all versions of ndmp?if not you have to add a switch statement to manage the difference between versions.On 6/30/06, Aaron Christensen [EMAIL PROTECTED] wrote: Added the dissection of a field that wasn't being picked up during NDMP MD5

Re: [Wireshark-dev] [PATCH] NDMP config_get_auth_attr_reply missing a field

2006-06-29 Thread ronnie sahlberg
ok,ill check it in in a few hours.by the way, do you have access to ndmp captures you can share and upload to the wiki page?we do not have any public sample captures of NDMP yet. On 6/30/06, Aaron Christensen [EMAIL PROTECTED] wrote: Hi, Ronnie,I initally checked this against the specification for

Re: [Wireshark-dev] [PATCH] NDMP config_get_auth_attr_reply missing a field

2006-06-30 Thread Aaron Christensen
Sure. Done:http://wiki.wireshark.org/Network_Data_Management_ProtocolA couple of images of captured packets (including one that works after the patch) and a sample packet capture. The NDMP client/server I was using had some extensions not recognized, so there's some extra traffic that is NDMP-ish

Re: [Wireshark-dev] NDMP config_get_auth_attr_reply missing a field

2006-06-30 Thread ronnie sahlberg
checked in On 6/30/06, Aaron Christensen [EMAIL PROTECTED] wrote: Added the dissection of a field that wasn't being picked up during NDMP MD5 authentication. The NDMP_CONFIG_GET_AUTH_ATTR message response was using the function dissect_auth_attr_msg() which dissects an auth_attr struct.

Re: [Wireshark-dev] NDMP config_get_auth_attr_reply missing a field

2006-06-30 Thread ronnie sahlberg
great stuff. thanks On 6/30/06, Aaron Christensen [EMAIL PROTECTED] wrote: Sure. Done: http://wiki.wireshark.org/Network_Data_Management_Protocol A couple of images of captured packets (including one that works after the patch) and a sample packet capture. The NDMP client/server I was

[Wireshark-dev] Next release (plus SVN and roadmap changes)

2006-06-30 Thread Gerald Combs
We're overdue for an official Wireshark release. A couple of people have pointed out that the code in /trunk is in better shape than /trunk-1.0, and that we might be better off using it for future releases. I agree. I'd like to make the following changes in the repository, which would address

Re: [Wireshark-dev] Interesting problem with tshark - understood and solved

2006-06-30 Thread Guy Harris
On Jun 30, 2006, at 12:27 PM, Bryant Eastham wrote: I now understand the problem, and have found the problem in the code. I should have mentioned that I am running tshark from a build, not an installed, directory. It appears that tshark.c is missing the call init_progfile_dir(argv[0]);.

Re: [Wireshark-dev] Next release (plus SVN and roadmap changes)

2006-07-01 Thread Kukosa, Tomas
Would not it be better to make /trunk-1.0 as late as we have implemented all features planned for 1.0.0? Then the /trunk-1.0 would continue only with bug fixies. I am affraid when we make /trunk-1.0 now we will come to the same conclusion during next release, i.e. to forgot /trunk-1.0 and use

Re: [Wireshark-dev] Next release (plus SVN and roadmap changes)

2006-07-01 Thread Ulf Lamping
Kukosa, Tomas wrote: Would not it be better to make /trunk-1.0 as late as we have implemented all features planned for 1.0.0? Then the /trunk-1.0 would continue only with bug fixies. I am affraid when we make /trunk-1.0 now we will come to the same conclusion during next release, i.e. to

[Wireshark-dev] patch for BGP/VPLS dissector

2006-07-01 Thread Hannes Gredler
hi wireshark developers, attached a patch for the BGP dissector for correct display of VPLS NLRIs as per the latest spec (draft-ietf-l2vpn-vpls-bgp-08). in rev 18189 the label-block size was missing. /hannes Index: packet-bgp.c

[Wireshark-dev] Patches for gsm-packet_sms dissector

2006-07-02 Thread Willem Dekker
Dear wireshark developers, After running same test trace files I noticed a lot of non-utf8 error messages from wireshark. The attached patch fixes this and converts the sms content (7 bit encoded, gms 03.38 alphabet) into utf8. The only difficutily I had is how to handle the platforms

[Wireshark-dev] SVN link failing on FC5 due to missing -lgcrypt

2006-07-03 Thread Jeff Morriss
Hi list, My FC5 (SVN 18636) compile fails here: gcc -DINET6 -D_U_=__attribute__((unused)) -Wall -Wpointer-arith -W -g -O2 -I/usr/local/include -pthread -I/usr/include/gtk-2.0 -I/usr/lib/gtk-2.0/include -I/usr/include/atk-1.0 -I/usr/include/cairo -I/usr/include/pango-1.0

Re: [Wireshark-dev] New dissector: exec (rexec) protocol

2006-07-03 Thread ronnie sahlberg
Hi, checked in i changed the indentation to be more consistent with the rest of wireshark i removed a few if(tree) tests and initialized exec_tree to NULL instead i removed the memcopy and the array of character for username/command and replaces if with a pointer and se_strdup() I dont know

[Wireshark-dev] [Patch] to voip_calls.c (bug 892 again)

2006-07-04 Thread Martin Mathieson
Hi, Mike Oliveras has indicated that for MGCP voip calls, 2 seconds may be a better timeout for still matching DLCX requests to a hung-up endpoint, as in this patch. Regards, Martin ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org

Re: [Wireshark-dev] [Patch] to voip_calls.c (bug 892 again)

2006-07-04 Thread Martin Mathieson
Maybe, but where? If it was added as a protocol preference to the MGCP dissector (which is a plugin), will that variable be available to voip_calls.c ? Regards, Martin Anders Broman (AL/EAB) wrote: Hi, Should this time be configurable? Brg Anders -Original Message- From: [EMAIL

[Wireshark-dev] Copy over personal profile files from Ethereal to Wireshark now done in Win32 NSIS

2006-07-04 Thread Ulf Lamping
Hi List! There was still an open point about copying over the old preferences and alike files from Ethereal to Wireshark. I had a look at the current implementation. The problem to my previous proposal is, that not only the files that we read and write are located in that dir, but probably

Re: [Wireshark-dev] Patches for gsm-packet_sms dissector

2006-07-04 Thread Anders Broman
Checked in. Brg Anders -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Willem Dekker Skickat: den 2 juli 2006 23:07 Till: wireshark-dev@wireshark.org Ämne: [Wireshark-dev] Patches for gsm-packet_sms dissector Dear wireshark developers, After running same

Re: [Wireshark-dev] [Patch] to voip_calls.c (bug 892 again)

2006-07-04 Thread Anders Broman
Checked in. Brg Anders -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Martin Mathieson Skickat: den 4 juli 2006 11:49 Till: Developer support list for Wireshark Ämne: [Wireshark-dev] [Patch] to voip_calls.c (bug 892 again) This time with patch

[Wireshark-dev] [DTLS patch]

2006-07-06 Thread authesserre samuel
Hi, -- Authesserre Samuel 12 rue de la défense passive 14000 CAEN FRANCE 06-27-28-13-32 [EMAIL PROTECTED] ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

Re: [Wireshark-dev] Preliminary Interest Gauging: Usability Review of Wireshark

2006-07-06 Thread John McDermott
On Thu, 06 Jul 2006 06:00:27 -0600, Johnathan Nightingale wrote: I've seen several articles in the past little while talking about getting started with wireshark or ethereal basics and, while every decent product out there gets a couple of those, I think part of the message I'm left with is

[Wireshark-dev] Build problem after update

2006-07-06 Thread Tinoshi Kitazawa
Hi, I've updated my wireshark project (windows) using SVN, and now I get the following error: packet.cops.c packet-cops.c(72) : fatal error C1083: Cannot open include file: 'net-snmp/net-snmp-config.h': No such file or directory packet-snmp.c packet-snmp-template.c(70) : fatal error C1083:

[Wireshark-dev] Release early, release often? - What about a new release?

2006-07-10 Thread Ulf Lamping
Hi List! The current release situation is unsatisfying IMHO. The last official release is the Ethereal 0.99.0 version from April 24, 2006 which is about 10 weeks ago and contains some frequently reported (and quite annoying) bugs in the win32 export functions (and obviously elsewhere). The

[Wireshark-dev] Funky packet, bad capture, bad display or what?

2006-07-10 Thread John McDermott
A friend sent me a trace with this packet: Frame 1 (78 bytes on wire, 78 bytes captured) Arrival Time: Jul 9, 2006 13:58:01.527266000 Time delta from previous packet: 0.0 seconds Time since reference or first frame: 0.0 seconds Frame Number: 1 Packet

Re: [Wireshark-dev] Release early, release often? - What about a new release?

2006-07-10 Thread Ulf Lamping
Jaap Keuter wrote: Hi, No one has had the time to get the ethereal/wireshark configuration reading stuff sorted out. Anyone have any idea how invasive that would be? Maybe a waiting point for 0.99.2 branch, which cannot be released without this anyway, IMHO. I've already committed stuff

Re: [Wireshark-dev] Release early, release often? - What about a new release?

2006-07-11 Thread Jacques, Olivier \(OpenCall Test Infra\)
No one has had the time to get the ethereal/wireshark configuration reading stuff sorted out. Anyone have any idea how invasive that would be? Maybe a waiting point for 0.99.2 branch, which cannot be released without this anyway, IMHO. I don't see that as a pre-requisite. IMHO

Re: [Wireshark-dev] FW: Listen_rtp plugin

2006-07-11 Thread Guy Harris
Anders Broman (AL/EAB) wrote: Alejandro I think your proposed plugin looks realy good and something we would have use for. From the recent mails I'm a bit confused to where we stand on this. I think Guy had some comments on the implementation, is that beeing worked on or is further

Re: [Wireshark-dev] Release early, release often? - What about a new release? (Preference files copy?)

2006-07-11 Thread Anders Broman \(AL/EAB\)
Hi, In my opinion it depends on how big the problem you are trying to solve realy is and how complicated it will be To design a well working solution, sometimes the cure is worse than the illnes. For Windows it seems like we have reasonable solution, how complicated will it be to do a solution

[Wireshark-dev] Set button label in GTK 1.2

2006-07-11 Thread Tinoshi Kitazawa
Hi, I was looking through the wireshark code to find a way to set the label in a GtkButton with Gtk1.x and I've found this (in gtk\simple_dialog.c): #if GTK_MAJOR_VERSION = 2 /* XXX - find a way to set the GtkButton label in GTK 1.x */ gtk_button_set_label(GTK_BUTTON(ask_cb),

Re: [Wireshark-dev] Release early, release often? - What about a new release? (Preference files copy?)

2006-07-11 Thread Guy Harris
Anders Broman (AL/EAB) wrote: In my opinion it depends on how big the problem you are trying to solve realy is and how complicated it will be To design a well working solution, sometimes the cure is worse than the illnes. Is there any reason why when trying to open a file in the

Re: [Wireshark-dev] Doku

2006-07-13 Thread Jaap Keuter
Hi, Fixed some typos and checked it in. Thanx, Jaap On Thu, 13 Jul 2006, Gerhard Gappmeier wrote: Hi Jaap and Ulf I have added a new chapter about tcp_dissect_pdu to WSDG_chapter_dissection.xml (revision 18722). Can you please review that and check it in. regards, Gerhard On

Re: [Wireshark-dev] Repository updates

2006-07-13 Thread Gerald Combs
Neil Piercy wrote: Hi, I follow what has been done to the SVN fine, but I'm still confused about what is intended in the future for the separate trunks: Will a new trunk be produced for every release ? If so, do they represent a snapshot which is then left frozen ? If not frozen,

Re: [Wireshark-dev] Repository updates

2006-07-13 Thread Guy Harris
On Jul 13, 2006, at 3:58 PM, Gerald Combs wrote: Yes, and yes. Right now in the repository root we have: /trunk - The repository everyone should be using for development. Which could be thought of as the equivalent of CVS top of tree. /trunk-0.99.2 - What will eventually be

Re: [Wireshark-dev] More Diameter [patches]

2006-07-16 Thread Anders Broman
Chjecked in. Brg Anders -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Martin Mathieson Skickat: den 14 juli 2006 16:21 Till: Developer support list for Wireshark Ämne: [Wireshark-dev] More Diameter [patches] Hi, These patches - add a few more

[Wireshark-dev] cannot get a handle on HTTP dissector

2006-07-17 Thread Steve Grinwis
Hi all, Im writing a dissector for a protocol that has an HTTP payload that I would like to dissect, But when I call find_dissector(http); it returns NULL. I dont think that its my syntax, because I get a valid handle when I call it for ip. Is there a good reason why I cant do this?

Re: [Wireshark-dev] cannot get a handle on HTTP dissector

2006-07-17 Thread Guy Harris
Steve Grinwis wrote: I’m writing a dissector for a protocol that has an HTTP payload that I would like to dissect, But when I call find_dissector(“http”); it returns NULL. Are you calling this in the register routine or the register-handoff routine? There's no guarantee that any given

[Wireshark-dev] Request for details on security issues in 0.99.0

2006-07-18 Thread Frederic Peters
Hello, http://www.wireshark.org/security/wnpa-sec-2006-01.html lists several vulnerabilities and announces affected versions range from 0.8.16 up to and including 0.99.0. However the detailed listing of vulnerabilities doesn't list any one for 0.99.0. Perhaps the 'Versions affected' info should

Re: [Wireshark-dev] Request for details on security issues in 0.99.0

2006-07-18 Thread Frederic Peters
Gerald Combs wrote: Have been updated to include ranges. I'll try to include ranges in future documentation as well. Many thanks, Frederic ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org

[Wireshark-dev] Bug in packet-eapol.c

2006-07-18 Thread Michael Stevens
This section of code prevents disassembly of the data field of RSN Key-Data packets that are flagged as Protected. From what I can tell the first comment is wrong and all group key key data fields are encrypted, not just WPA. The chained IE fields have a null terminating IE of 0 length to

Re: [Wireshark-dev] [Patch] to MSRP dissector

2006-07-19 Thread Joerg Mayer
On Wed, Jul 19, 2006 at 11:52:43AM +0100, Martin Mathieson wrote: This patch: - adds headers found in later versions of the msrp drafts - fixes a problem where wrong length values were used while parsing the request/status line and it was going beyond linelen - Transaktion - Transaction -

[Wireshark-dev] New DTD (xcap-caps)

2006-07-19 Thread Martin Mathieson
Hi, Here is a DTD for xcap-caps and changes needed to install it (nsi change is untested). Regards, Martin ? wireshark:protocol proto_name=xcap-caps description=XML Configuration Access Protocol Server Capabilities hierarchy=yes ? !-- $Id: reginfo.dtd 18248 2006-05-29 20:44:06Z

[Wireshark-dev] [Patch] Process all XML dtds directories

2006-07-19 Thread Mike Duigou
The enclosed patch extends the way in which the xml dissector loads DTD definitions. Rather than loading only a single dtd directory this patch will cause the contents of *both* the ~/.wireshark/dtds (user) and the /usr/local/share/wireshark/dtds (built-ins) to be loaded. The current dtd

Re: [Wireshark-dev] [Patch] to MSRP dissector

2006-07-19 Thread Anders Broman
Checked in. Brg Anders -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Martin Mathieson Skickat: den 19 juli 2006 15:50 Till: Developer support list for Wireshark Ämne: Re: [Wireshark-dev] [Patch] to MSRP dissector Joerg Mayer wrote: On Wed, Jul 19, 2006

Re: [Wireshark-dev] New DTD (xcap-caps)

2006-07-19 Thread Anders Broman
Checked in. Brg Anders -Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Martin Mathieson Skickat: den 19 juli 2006 18:12 Till: Developer support list for Wireshark Ämne: [Wireshark-dev] New DTD (xcap-caps) Hi, Here is a DTD for xcap-caps and changes needed

Re: [Wireshark-dev] wireshark_0.99.2-1_i386.changes REJECTED

2006-07-19 Thread Gerald Combs
The Debian package approval process turned up several source files in the Wireshark distribution that don't have explicit licenses. With the exception of in_cksum.h, is there any reason these shouldn't be GPLed? epan/in_cksum.h: no license info (but most probably BSD, like in_cksum.c)

[Wireshark-dev] AJP13 Fixes

2006-07-19 Thread Ian Abel
Hi, The attached file should fix the following two bugs in the AJP dissector. 1) The dissector doesn't know about CPING/CPONG 2) The dissector misinterprets multiple requests in one connection if a prior request has a Body request part. Yours, Ian -- Ian Abel [EMAIL PROTECTED] Systems

[Wireshark-dev] Solaris dfilter/dtd issues

2006-07-20 Thread Jeff Morriss
Hi list, I've been trying to get a running Wireshark 0.99.2 on Solaris 9 for a couple days now; recently I switched to working from SVN and I'm still having issues. They all seem to be related to dtd or dfilter stuff. For example, trying to run SVN 18769 gives: firebird

Re: [Wireshark-dev] wireshark_0.99.2-1_i386.changes REJECTED

2006-07-20 Thread LEGO
On 7/19/06, Gerald Combs [EMAIL PROTECTED] wrote: The Debian package approval process turned up several source files in the Wireshark distribution that don't have explicit licenses. With the exception of in_cksum.h, is there any reason these shouldn't be GPLed? tap-funnel.c: no license

Re: [Wireshark-dev] wireshark_0.99.2-1_i386.changes REJECTED

2006-07-20 Thread ronnie sahlberg
On 7/19/06, Gerald Combs [EMAIL PROTECTED] wrote: The Debian package approval process turned up several source files in the Wireshark distribution that don't have explicit licenses. With the exception of in_cksum.h, is there any reason these shouldn't be GPLed? snprintf.h: no license

Re: [Wireshark-dev] Solaris dfilter/dtd issues

2006-07-20 Thread LEGO
can you type $ lex -V $ flex -V and see what comes out. I think you might be using sun's lex (for which I never tested the code) instead of flex. On 7/20/06, Jeff Morriss [EMAIL PROTECTED] wrote: Hi list, I've been trying to get a running Wireshark 0.99.2 on Solaris 9 for a couple days now;

Re: [Wireshark-dev] [Wireshark-commits] rev 18766: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-msrp.c

2006-07-20 Thread Martin Mathieson
Martin Mathieson wrote: Joerg Mayer wrote: On Wed, Jul 19, 2006 at 06:51:26PM +, [EMAIL PROTECTED] wrote: http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=revrevision=18766 User: etxrab Date: 2006/07/19 06:51 PM Log: From Martin Mathieson: This patch: - adds headers found

Re: [Wireshark-dev] wireshark_0.99.2-1_i386.changes REJECTED

2006-07-20 Thread Ulf Lamping
Gerald Combs wrote: merge.c: missing license info, but based on ethereal work mergecap.c: idem Ok, I had a look at editcap.c, mergecap.c and merge.c editcap.c was implemented by Richard Sharpe and Guy Harris, later improved by others.

Re: [Wireshark-dev] 802.11 ERP barker preamble bit misinterpretation (patch inside)

2006-07-20 Thread Joerg Mayer
On Thu, Jul 20, 2006 at 09:45:37PM +0100, Daniel Drake wrote: The barker preamble bit is set when a station associates which does not support short preambles. When it is 0, short preambles are allowed. Committed revision 18777. Thanks! Joerg -- Joerg Mayer

Re: [Wireshark-dev] Bug 976

2006-07-20 Thread Guy Harris
On Jun 27, 2006, at 5:51 AM, Martin Mathieson wrote: Looking at frame 170 in the trace, it looks like tvb_get_ephemeral_text() struggles with the null character in the middle of the 4th parameter (in the WWW-Authenticate header) and returns NULL. That shouldn't happen -

Re: [Wireshark-dev] Solaris dfilter/dtd issues

2006-07-20 Thread Jeff Morriss
Well, I have these: firebird [~/] flex -V flex version 2.5.4 firebird [~/] lex -V lex: Software Generation Utilities (SGU) Solaris-ELF (4.0) but it appears to be using 'flex': checking for flex... /usr/local/bin/flex I upgraded to flex 2.5.31 but still hit the problem. So I updated SVN

Re: [Wireshark-dev] wireshark_0.99.2-1_i386.changes REJECTED

2006-07-21 Thread Joerg Mayer
Hopefully, all files should have a GPL compatible License. If not, then we need to fix this. Otherwise, the default license is valid. I don't understand the debian paranoia team here: either they have a valid complaint (i.e. an *incompatible* license), then that's fine (I mean the complaint).

Re: [Wireshark-dev] Bug 976

2006-07-21 Thread Martin Mathieson
Guy Harris wrote: On Jun 27, 2006, at 5:51 AM, Martin Mathieson wrote: Looking at frame 170 in the trace, it looks like tvb_get_ephemeral_text() struggles with the null character in the middle of the 4th parameter (in the WWW-Authenticate header) and returns NULL. That shouldn't

[Wireshark-dev] Plugin architecture requires

2006-07-21 Thread Wyer, Andrew
Title: Plugin architecture requires I've been using Ethereal / Wireshark for a few years now, but recently needed to add a custom protocol. In learning about developing for this app, it seems that Ethereal plugins are not based on an API and require the full source to be around to compile

Re: [Wireshark-dev] Bug 976

2006-07-21 Thread Guy Harris
On Jul 21, 2006, at 12:57 PM, Martin Mathieson wrote: I think I wouldn't have created this bug in the first place if the function was instead called proto_tree_add_text_format(). I didn't realise the last arg was a format string - I'm used to those function names having the _format

Re: [Wireshark-dev] AJP13 Fixes

2006-07-21 Thread ronnie sahlberg
checked in maybe you can add a nice wiki page for this protocol and donate some sample captures? On 7/19/06, Ian Abel [EMAIL PROTECTED] wrote: Hi, The attached file should fix the following two bugs in the AJP dissector. 1) The dissector doesn't know about CPING/CPONG 2) The dissector

Re: [Wireshark-dev] Dissector for H1 protocol not called

2006-07-21 Thread ronnie sahlberg
thanks, checked in it would be nice with example captures on the wiki for H1 and SKINNY On 7/21/06, Jeff Morriss [EMAIL PROTECTED] wrote: Hi list, Thomas Boehne wrote: On Thursday 20 July 2006 12:06, Jeff Morriss wrote: If I set the TCP preference Try heuristic dissectors first? then

Re: [Wireshark-dev] Allow FT_NONE item to be filtered from menu

2006-07-21 Thread ronnie sahlberg
checked in On 7/20/06, Martin Mathieson [EMAIL PROTECTED] wrote: Hi, This patch allows FT_NONE items to be built into filter expressions (i.e. testing for their presence or absence rather than comparing with a value) using the Apply|Prepare a Filter menus. What drove me to add this was

Re: [Wireshark-dev] wireshark_0.99.2-1_i386.changes REJECTED

2006-07-22 Thread Frederic Peters
Joerg Mayer wrote: Hopefully, all files should have a GPL compatible License. If not, then we need to fix this. Otherwise, the default license is valid. I don't understand the debian paranoia team here: either they have a valid complaint (i.e. an *incompatible* license), then that's fine (I

Re: [Wireshark-dev] wireshark_0.99.2-1_i386.changes REJECTED

2006-07-22 Thread Guy Harris
Frederic Peters wrote: This is about those files: epan/epan.c epan/exceptions.h epan/dfilter/gencode.h epan/dfilter/glib-util.c epan/dfilter/glib-util.h I think Gilbert Ramirez contributed the original versions of those; I think all the rest of his contributions are GPL'ed -

Re: [Wireshark-dev] wireshark_0.99.2-1_i386.changes REJECTED

2006-07-22 Thread ronnie sahlberg
I did the original NLM stuff. Ill update packet-nlm.h On 7/22/06, Guy Harris [EMAIL PROTECTED] wrote: Frederic Peters wrote: This is about those files: epan/epan.c epan/exceptions.h epan/dfilter/gencode.h epan/dfilter/glib-util.c epan/dfilter/glib-util.h I think

Re: [Wireshark-dev] wireshark_0.99.2-1_i386.changes REJECTED

2006-07-22 Thread ronnie sahlberg
they are all under gpl compatible licences. On 7/22/06, Frederic Peters [EMAIL PROTECTED] wrote: Joerg Mayer wrote: Hopefully, all files should have a GPL compatible License. If not, then we need to fix this. Otherwise, the default license is valid. I don't understand the debian

[Wireshark-dev] Small patch for l2tp numbers

2006-07-22 Thread Carlos Pignataro
Hello, Please find attached a patch with updates to l2tpv3's l2_sublayer_vals and pw_types_vals numbers (and pw type decoding). Please check in; comments and corrections are welcome. Thanks! -- --Carlos Pignataro. Escalation RTP - cisco Systems Index: epan/dissectors/packet-l2tp.c

[Wireshark-dev] Understanding a file format with no underlying protocol information

2006-07-24 Thread Priyanka Kamath
Hi All, I have a capture file which i am interested in showing on the Wireshark GUI. My capture file has info about only *one* protocol (proprietery) and no other protocol.I am planning to write a dissector for my file.I am confused as to how ethereal will call my dissector. My file has no data

[Wireshark-dev] conflict when built with OpenSSL on Mac OS X

2006-07-24 Thread LEGO
I noticed that when I build --with-ssl wireshark cannot read any file. If I compile without it works OK. We had a similar report on Solaris where WS crashed when reading the DTDs as soon as the reporter build it --without-ssl it worked. I did not further dig into the issue. My question is

Re: [Wireshark-dev] wireshark_0.99.2-1_i386.changes REJECTED

2006-07-24 Thread Gerald Combs
Guy Harris wrote: gtk/win32-file-dlg.h Gerald? That one's yours, I think Fixed. ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

Re: [Wireshark-dev] conflict when built with OpenSSL on Mac OS X

2006-07-24 Thread Joerg Mayer
On Mon, Jul 24, 2006 at 05:56:56PM +0200, LEGO wrote: My question is what is OpenSSL used for? 1) net-snmp (and ucd-snmp). IIRC, they are only needed to resolve OIDs to MIB names by now, but I may be wrong. 2) mit kerberos5 support probably needs it as well. Can we replace it with GnuTLS?

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-25 Thread Steve Grinwis
I modified the makefile by hand. Esentially all I did was remove all instances of Ethereal and replaced it with Wireshark. Is there more to do? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jaap Keuter Sent: Tuesday, July 25, 2006 9:22 AM To:

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-25 Thread Steve Grinwis
My makefile didn't have any of the python plugin.c stuff. I essentially copied the sbus makefile and pasted it overtop of mine I did notice that I had to manually add all of the *.obj files to the objects list myself or it wouldn't compile correctly meaning that the line: DISSECTOR_OBJECTS =

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-25 Thread Jaap Keuter
Hi, No, these are not important for compilation on Win32. You do compile in a Win32 command window, do you. I mean, not in a cygwin window. Another thing to watch for is using nmake, not make. Other than this I can't give you more advice. Thanx, Jaap On Tue, 25 Jul 2006, Steve Grinwis wrote:

Re: [Wireshark-dev] [Patch] Tracking setup of MSRP conversations

2006-07-25 Thread Martin Mathieson
I missed out a patch to add the new header file to epan/dissector/Makefile.common Thanks, Martin Martin Mathieson wrote: Hi, These patches: - allow SDP to parse the IP address + port for the MSRP session from the path attribute - setup an MSRP conversation using this address, whose data

Re: [Wireshark-dev] wireshark-0.99.2 and OpenBSD 3.9

2006-07-25 Thread Stephen Fisher
On Mon, Jul 24, 2006 at 02:21:47PM -0600, Dale Carstensen wrote: I browsed a bit in the gmane archive for the problems I'm seeing building wireshark 0.99.2 on OpenBSD 3.9, and all I found was a note about adding @GCRYPTLIBS@ to Makefile.am in 3 places, so I'm thinking the problems I see

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-25 Thread Steve Grinwis
I rebuilt Wireshark to see if I could find any errors in the build. I came across a few things. xcopy gryphon\*.dll 0.99.2 /d gryphon\gryphon.dll 1 File(s) copied xcopy h223\*.dll 0.99.2 /d stats_tree\stats_tree.dll 1 File(s) copied xcopy v5ua\*.dll 0.99.2 /d (... more

Re: [Wireshark-dev] wireshark-0.99.2 and OpenBSD 3.9

2006-07-25 Thread Joerg Mayer
On Mon, Jul 24, 2006 at 02:21:47PM -0600, Dale Carstensen wrote: I browsed a bit in the gmane archive for the problems I'm seeing building wireshark 0.99.2 on OpenBSD 3.9, and all I found was a note about adding @GCRYPTLIBS@ to Makefile.am in 3 places, so I'm thinking the problems I see

Re: [Wireshark-dev] Small [Patch] to H.323 VoIP calls

2006-07-25 Thread Keith French
Guys, Thanks for your efforts, as I am not a developer, I await 0.99.3 with interest. Keith French. - Original Message - From: Martin Mathieson [EMAIL PROTECTED] To: Developer support list for Wireshark wireshark-dev@wireshark.org Sent: Tuesday, July 25, 2006 10:47 AM Subject: Re:

Re: [Wireshark-dev] [Wireshark-users] capture from a fifo

2006-07-26 Thread Richard van der Hoff
[Moving this to the dev list...] Richard van der Hoff wrote: Has wireshark stopped supporting capture from a fifo recently? I'm sure I used to be able to do things like the following: $ mkfifo fifo $ (cat cap; sleep 5; cat cap) fifo $ tshark -i fifo But it now dies after the first

[Wireshark-dev] [Patch] Re: capture from a fifo

2006-07-26 Thread Richard van der Hoff
Richard van der Hoff wrote: [tshark from a fifo] Ulf - I notice you made the relevant change here (r16787) - is there any reason why tshark shouldn't use capture_loop_dispatch to do its processing, rather than attempting to use cap_pipe_dispatch or pcap_dispatch directly? well, there

[Wireshark-dev] [patch] capture_sync.c cosmetics

2006-07-26 Thread Richard van der Hoff
This patch fixes a couple of comments in capture_sync.c. -- Richard van der Hoff [EMAIL PROTECTED] Telephony Gateways Project Manager Tel: +44 (0) 845 666 7778 http://www.mxtelecom.com Index: capture_sync.c === --- capture_sync.c

[Wireshark-dev] clopts test fix

2006-07-26 Thread Richard van der Hoff
An error message has been changed, such that the commandline options test doesn't work any more. This patch fixes the test accordingly. -- Richard van der Hoff [EMAIL PROTECTED] Telephony Gateways Project Manager Tel: +44 (0) 845 666 7778 http://www.mxtelecom.com Index: test/suite-clopts.sh

Re: [Wireshark-dev] [Patch] Re: capture from a fifo

2006-07-26 Thread Richard van der Hoff
Richard van der Hoff wrote: Richard van der Hoff wrote: [tshark from a fifo] Ulf - I notice you made the relevant change here (r16787) - is there any reason why tshark shouldn't use capture_loop_dispatch to do its processing, rather than attempting to use cap_pipe_dispatch or

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-26 Thread Steve Grinwis
Hey all, Using the install-deps build target fixed the problem. It works like a charm (well... it loads the plugin). Now the only problems that I have are ones with my code. And I can deal with my code. Thanks so much! -Steve -Original Message- From: [EMAIL PROTECTED]

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-26 Thread Steve Grinwis
The fact that you have to do an install-dep isn't documented anywhere... It might not be a bad thing to add to readme.win32. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peter Johansson Sent: Wednesday, July 26, 2006 6:19 AM To: Developer support

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-26 Thread Jaap Keuter
Hi, You could write something up and post a patch. You may also consider an addition in the developer guide, very usefull for Win32 development. Thanx, Jaap On Wed, 26 Jul 2006, Steve Grinwis wrote: The fact that you have to do an install-dep isn't documented anywhere... It might not be a

Re: [Wireshark-dev] [Patch] to fix DTD parsing problem

2006-07-26 Thread Guy Harris
Martin Mathieson wrote: name [A-Za-z][-a-z0-9_]*[-a-zA-Z0-9_]* Wouldn't [A-Za-z][-a-zA-Z0-9_]* suffice? ([...]* matches zero or more occurrences, and [-a-zA-Z0-9_] is a superset of [a-z0-9_].) ___ Wireshark-dev mailing list

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-26 Thread Peter Johansson
One have to remember though to run nmake with the install-deps build target after every recompilation of the source (for any change you make). Otherwise Wireshark is started with the old compiled code. I can't remember the amount of times I have been trying to debug my code and it just does

Re: [Wireshark-dev] wireshark-0.99.2 and OpenBSD 3.9

2006-07-26 Thread John McDermott
Steve, Can you please post the appropriate changes to README.bsd to describe what you did so other users can try that, too? Thanks, --john On Wed, 26 Jul 2006 03:11:06 -0600, [EMAIL PROTECTED] wrote: On Tue, Jul 25, 2006 at 08:40:38AM -0700, Stephen Fisher wrote: On Mon, Jul 24, 2006 at

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-26 Thread Steve Grinwis
I'm going to work up a path to the readme.win32 to include this information. I think it would be a good idea to include standard build instructions something like this: To get a standard build working: To start setup and download all the required packages: Nmake -f Makefile.nmake setup To

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-26 Thread Cook, Timothy
You may want to include: nmake -fmakefile.nmake distclean as the first step. This will get rid of auto generated files that may cause initial Win32 build to fail. -Tim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Grinwis Sent: Wednesday,

Re: [Wireshark-dev] [Bug 1001] free() invalid pointer in dissect_802_3 at packet-ieee8023.c:71

2006-07-26 Thread Joerg Mayer
Hello, anyone who knows his way around Wiresharks exception code (or C's setlongjmp etc statements). If so, please have a look at bug 1001. thanks Joerg On Wed, Jul 26, 2006 at 01:55:11PM +, [EMAIL PROTECTED] wrote: http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1001 ---

Re: [Wireshark-dev] Small [Patch] to H.323 VoIP calls

2006-07-26 Thread Martin Mathieson
If you could send a capture showing the problem to the list (or directly to me if you'd prefer), I'll take a look. Martin - Original Message - From: Keith French [EMAIL PROTECTED] To: Developer support list for Wireshark wireshark-dev@wireshark.org Sent: 25 July 2006 21:48 Subject: Re:

Re: [Wireshark-dev] [Patch] to fix DTD parsing problem

2006-07-26 Thread Martin Mathieson
Martin Mathieson wrote: name [A-Za-z][-a-z0-9_]*[-a-zA-Z0-9_]* Wouldn't [A-Za-z][-a-zA-Z0-9_]* suffice? ([...]* matches zero or more occurrences, and [-a-zA-Z0-9_] is a superset of [a-z0-9_].) That would have been the obvious fix to make in the first place, I was lazily

Re: [Wireshark-dev] Ethereal to Wireshark issues [patch]

2006-07-26 Thread Steve Grinwis
Ok. Please find attached my patch for readme.win32. It should hopefully be a good starting point for people trying to build Wireshark on windows for the first time. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cook, Timothy Sent: Wednesday, July

  1   2   3   4   5   6   7   8   9   10   >