Re: [Wireshark-dev] Doku

2006-07-13 Thread Jaap Keuter
On Wednesday 12 July 2006 14:44, Jaap Keuter wrote: Hi Gerhard, On Mon, 31 Jul 2006, Gerhard Gappmeier wrote: Hi Jaap I'm not a wireshark expert yet, but I will try to add a basic chapter that you can review before committing it to svn. I will post a patch when I finished it. Cool

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-25 Thread Jaap Keuter
: Yes. It's a sparse file with two lines of working code. I did notice however that I don't have a Makefile.am or Makefile.in. Is that important? I'm compiling on Windows -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jaap Keuter Sent: Tuesday

Re: [Wireshark-dev] Ethereal to Wireshark issues

2006-07-26 Thread Jaap Keuter
That is exactly why! / Peter Jaap Keuter wrote: Hi, Isn't that why we have the install-deps build target? Thanx, Jaap On Wed, 26 Jul 2006, Graham Bloice wrote: I rebuilt Wireshark to see if I could find any errors in the build. I came across a few things. SNIP rm

Re: [Wireshark-dev] bug in follow TCP ASCII

2006-08-03 Thread Jaap Keuter
Hi, I think this is the result of the workaround for critical bug 852. As the comment states: Actually this stuff (related to printing) need serious rework. Thanx, Jaap On Thu, 3 Aug 2006, Bert van Leeuwen wrote: Hi, I've discovered a bug in the follow TCP ASCII view, it seems to drop the

Re: [Wireshark-dev] Patch to packet-exec.c to fix a comment

2006-08-03 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Thu, 3 Aug 2006, Stephen Fisher wrote: I was looking at the dissector I wrote recently, packet-exec.c, to remember how to handle conversations and I noticed a comment that isn't clear. It would throw someone off because it isn't how the dissector was finally

Re: [Wireshark-dev] Firewall ACL

2006-08-10 Thread Jaap Keuter
Hi, Where did you read about Firewall ACL under Analyze? Check the whishlist on the Wiki, I think it's there. Thanx, Jaap On Wed, 9 Aug 2006, Dan Morin wrote: Hi guys and gals, I am a HUGE fan of Wireshark, as well as its former counterpart, Ethereal. I had just updated to Wireshark and

[Wireshark-dev] Solaris buildbot complains about zlib

2006-08-11 Thread Jaap Keuter
Hi Gerald, This is from the configure log of the Solaris buildbot: .. checking whether to use zlib for reading compressed capture files... yes checking zlib.h usability... yes checking zlib.h presence... yes checking for zlib.h... yes checking for gzgets in -lz... yes checking for gzgets

[Wireshark-dev] Bugzilla bug activity always empty

2006-08-23 Thread Jaap Keuter
Hi, Bugzilla gives the option to show bug activity, but that shows up a page void of information. Is that intentional? Thanx, Jaap ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

Re: [Wireshark-dev] [patch] Add a1, a2, a3, a4 address fields to packet-ieee80211 dissector

2006-09-03 Thread Jaap Keuter
Hi, Please refer to http://wiki.wireshark.org/Development/DeprecatedFunctions to see an alternative to your solution. Maybe you could report on how this works in this real life case. Thanx, Jaap On Sun, 3 Sep 2006, Solomon Peachy wrote: On Wed, Aug 23, 2006 at 05:38:28PM -0400, Solomon

Re: [Wireshark-dev] [wireshark-dev] patch for packet-ppp.c

2006-09-04 Thread Jaap Keuter
Hi, Good catch, checked in. Thanx, Jaap On Mon, 4 Sep 2006, Donald White wrote: I have found three more bugs in the dissect_pppmux() function of packet-ppp.c. A patch is attached. First, the length of the header of a sub-frame may be miscalculated if if the PID field is not present, but

Re: [Wireshark-dev] question about RTP Streams

2006-09-06 Thread Jaap Keuter
Hi, End-to-End means from the speech source (mic) to the speech destination (loudspeaker). Now Wireshark can capture half way in that path, so it cannot predict how the destination endpoint will deliver the speech to the listner. This is due to the fact that the destination endpoint has a jitter

Re: [Wireshark-dev] Build dependencies/conflicts unsatisfied; aborting

2006-09-15 Thread Jaap Keuter
Hi, That is for an _old_ ethereal package. I'm not sure which source tarball you used, but I recon the Debian package files weren't kept up to date. It should be better with the Wireshark tarballs. Thanx, Jaap On Fri, 15 Sep 2006 [EMAIL PROTECTED] wrote: Hi List, I tried to build a binary

Re: [Wireshark-dev] Query regarding GTP protocol

2006-09-15 Thread Jaap Keuter
On Fri, 15 Sep 2006, prashanth joshi wrote: Hi , I wanted to print a message in the decode_gtp_cause function. But i did not get any such result in the ethereal display. Please tell me what may be the reason. the following is the function : static int decode_gtp_cause(tvbuff_t *tvb,

Re: [Wireshark-dev] [patch] new dissector for linux packet kernel generator

2006-09-18 Thread Jaap Keuter
Hi, Checked in with some changes. - replace Licepnse with License (how did that happen! ;) - removed DBG stuff - added data dissector i.s.o just printing the number of bytes. Thanx, Jaap On Thu, 14 Sep 2006, Francesco Fondelli wrote: Hi all, You find attached a patch file (against svn

Re: [Wireshark-dev] [patch] YMSG dissector update

2006-09-18 Thread Jaap Keuter
Hi, This patch turns over the yahoo_status stuff completely. Sounds not very backwards compatible to me? Thanx, Jaap On Thu, 14 Sep 2006, Gena01 wrote: I am Yahoo plugin developer for Miranda IM http://www.miranda-im.org I have put together a patch for YMSG packet dissector. This is based

Re: [Wireshark-dev] using wireshark as Dll

2006-09-18 Thread Jaap Keuter
Hi, Well, you can look into libwireshark.dll. That was the idea, to have the dissection stuff done in there and presentation outside. I'm not aware of anyone using it this way right now, so your millage may vary. If you collect your experiences in a Wiki page, that would be nice. Thanx, Jaap On

Re: [Wireshark-dev] [patch] YMSG dissector update

2006-09-18 Thread Jaap Keuter
parts: 1. New Service constants 2. New packet statuses which replace the old yahoo_status codes Gena On 9/18/06, Jaap Keuter [EMAIL PROTECTED] wrote: Hi, This patch turns over the yahoo_status stuff completely. Sounds not very backwards compatible to me? Thanx, Jaap On Thu, 14

Re: [Wireshark-dev] [Wireshark-commits] rev 19254 : /trunk/epan/dissectors/ /trunk/epan/dissectors/: pa =?iso-8859-15?q?cket-dcp=2Ec_packet-dcp=2 Eh_packet-i

2006-09-19 Thread Jaap Keuter
Hi, /* packet-dccp.c * Routines for Distributed Checksum Clearinghouse packet dissection should say enough. Thanx, Jaap On Mon, 18 Sep 2006, Ulf Lamping wrote: http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=revrevision=19254 User: jake Date: 2006/09/18 01:59 PM Log:

Re: [Wireshark-dev] plugin proprietary dissector for Wireshark 0.99.3

2006-09-19 Thread Jaap Keuter
Hi, Better use: proto_tree_add uint(vppn_tree, hf_dest_id, tvb, 0, 0, packet_info.dl_dst); Thanx, Jaap On Mon, 18 Sep 2006, Bill Fassler wrote: I could use a little more help. The propietary protocol I am working with has a one byte ID at the ends of both the source and destination MAC

Re: [Wireshark-dev] Wiin32 link time!

2006-09-19 Thread Jaap Keuter
Hi, Build it as a plugin. Links instantly. Then move it into the epan/dissectors. Thanx, Jaap On Tue, 19 Sep 2006, Cook, Timothy wrote: On Windows (2k/XP), the link time is significant (1-2 minutes or at least it seems to be!). Can anyone tell me which dissectors are required? I have been

Re: [Wireshark-dev] [PATCH] enable sniff on USB ports

2006-09-19 Thread Jaap Keuter
Hi, Impressive work, it will take some time to absorb all this. It's going to require some serious testing, I guess. Thanx, Jaap On Tue, 19 Sep 2006, abeni wrote: Hi list, I'm trying to plug USB sniffing support into wireshark, at least under Linux. I have some working code (the attached

Re: [Wireshark-dev] base64.x crypt-md5.x; linking issues using them.

2006-09-19 Thread Jaap Keuter
Hi, Add the symbols to epan/libwireshark.def. Thanx, Jaap On Tue, 19 Sep 2006, Brian Vandenberg wrote: In the interim I've opted for the expedient approach of just adding the relevant .c files to makefile.common for my plugin, and that seems to work fine. I'm supposing there's a better

Re: [Wireshark-dev] New radius attributes (RFC 4590)

2006-09-20 Thread Jaap Keuter
Hi, Too bad, since the patch doesn't match RFC 4590 table 2. Care to fix it? Thanx, Jaap On Wed, 20 Sep 2006, Joerg Mayer wrote: Did anyone fix this? Committed revision 19266. Thanks! Joerg ___ Wireshark-dev mailing list

Re: [Wireshark-dev] New radius attributes (RFC 4590)

2006-09-20 Thread Jaap Keuter
Hi, No need, already patched the patch ;) Thanx, Jaap On Wed, 20 Sep 2006, Joerg Mayer wrote: On Wed, Sep 20, 2006 at 04:27:43PM +0200, Jaap Keuter wrote: Too bad, since the patch doesn't match RFC 4590 table 2. Care to fix it? The only thing I could do is to revert the patch. Should I

Re: [Wireshark-dev] EtherCAT Plugin

2006-09-20 Thread Jaap Keuter
Hi, Well, make it a regular dissector first, since you're going public anyway. Then post a patch adding the dissector to the current tree. Then duck for all the comments flying your way ;) Thanx, Jaap On Wed, 20 Sep 2006, [iso-8859-1] Richard K?mmel wrote: Hello, i have written a Parser for

Re: [Wireshark-dev] [PATCH] packet-smb.c lock display

2006-09-21 Thread Jaap Keuter
Hi, Checked in, with the additional change of ett_smb_unlock - ett_smb_lock in the next line. Clearly a copy-paste-forgot-to-modify Thanx, Jaap On Thu, 21 Sep 2006, Marco Strack wrote: Hi, the smb dissector displays lock requests in the Locking AndX Request as a vector of locks. It opens

[Wireshark-dev] Proposal to move Copy on packet detail popup menu

2006-09-21 Thread Jaap Keuter
Hi, Time and time again, I find myself looking for the Expand Subtrees item in the packet detail popup menu. It used to be the top most item, until Copy took that place. My proposal is to have the Most Frequently Used(tm) item at the top, that is to move Copy below Collapse all. Your thoughts

Re: [Wireshark-dev] Is it possible to add the actual data (80 bytes) to the proto tree in a chunk?

2006-09-21 Thread Jaap Keuter
Hi, How about feeding the data to the data dissector? Create a sub_tvb from the current offset to the end of the frame (assuming the data is at the end) and hand that to the data dissector. Lots of samples in other dissectors. Thanx, Jaap On Thu, 21 Sep 2006, Bill Fassler wrote: Ya know how

Re: [Wireshark-dev] Proposal to move Copy on packet detail popup menu

2006-09-22 Thread Jaap Keuter
Hi, I've done it. :) Thanx, Jaap On Thu, 21 Sep 2006, Joerg Mayer wrote: On Thu, Sep 21, 2006 at 05:59:55PM +0200, Jaap Keuter wrote: Time and time again, I find myself looking for the Expand Subtrees item in the packet detail popup menu. It used to be the top most item, until Copy took

Re: [Wireshark-dev] Proposal to move Copy on packet detail popup menu

2006-09-22 Thread Jaap Keuter
intuitively. Man such rambling, I need to go to bed ;) Jaap On Fri, 22 Sep 2006, Ulf Lamping wrote: Jaap Keuter wrote: Hi, I've done it. :) Hmmm, while looking at it - shouldn't the Copy item even be moved under the Follow SSL Stream block? I'm using the Apply As Filter frequently

Re: [Wireshark-dev] Add new protocol to wireshark

2006-09-27 Thread Jaap Keuter
Hi, Welcome to the wonderfull world of Wireshark development. As you might have guessed Ethereal development has continued under a new name, better focus on that. You can find valuable resources here: The Wiki http://wiki.wireshark.org/Development The docs, especially the Developer Guide and

Re: [Wireshark-dev] patch to eyesdn wiretap module

2006-09-27 Thread Jaap Keuter
Hi, Why not adding 129 as allowed channel number? Please supply patch as attachment for easy handling. Thanx, Jaap On Wed, 27 Sep 2006, Rolf Fiedler wrote: Hi, I am the author of the eyesdn wiretap module. Recently we added ATM support to our trace format. We used channel id 129 for that,

Re: [Wireshark-dev] Patch for FMIPv6

2006-09-28 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Thu, 28 Sep 2006, Nicolas DICHTEL wrote: Hi, I've two patchs for FMIPv6: - FBU encapsulated in FNA are not correctly parsed; - there is an error when parsing LLA Option. Patch is against ethereal-0.99.0, should I remake it against the latest

Re: [Wireshark-dev] patch to eyesdn wiretap module

2006-09-28 Thread Jaap Keuter
Hi, On Wed, 27 Sep 2006, Rolf Fiedler wrote: Hi, I am the author of the eyesdn wiretap module. Recently we added ATM support to our trace format. We used channel id 129 for that, so far only 0 for D channel and 1-30 for bearer channels had been in use. I've taken the liberty to keep the

Re: [Wireshark-dev] patch to eyesdn wiretap module

2006-09-29 Thread Jaap Keuter
Hi, No wories. I still think it's good to have sanity checks (You do _not_ want to get involved in corrupt capture files), but they should not hinder developement. So what I've done is open up the channel space from 128 up, which covers the cases seen so far and hopefully future stuff. Thanx,

Re: [Wireshark-dev] Patch for NEMO

2006-09-29 Thread Jaap Keuter
Hi, Isn't this also true for ACOA? 8- #define MIP6_ACOA_LEN16 #define MIP6_ACOA_ACOA_OFF2 #define MIP6_ACOA_ACOA_LEN 16 8- Thanx, Jaap On Fri, 29 Sep 2006, Nicolas DICHTEL wrote: Hi, please find enclosed a patch about Mobile Network Prefix option in NEMO.

Re: [Wireshark-dev] Question concerning some specific protocol...

2006-09-30 Thread Jaap Keuter
Hi, Well that is simple then. Register your proprietary dissector for the UDP port. If it's your protocol dissect it, otherwise hand it over to the RTP dissector. Thanx, Jaap On Sat, 30 Sep 2006, Tobias Erichsen wrote: Hi everyone, I have used Ethereal/Wireshark for some time now, and I

Re: [Wireshark-dev] Question concerning some specific protocol...

2006-09-30 Thread Jaap Keuter
] [mailto:[EMAIL PROTECTED] Im Auftrag von Jaap Keuter Gesendet: Samstag, 30. September 2006 17:53 An: Developer support list for Wireshark Betreff: Re: [Wireshark-dev] Question concerning some specific protocol... [heur] Hi, Well that is simple then. Register your proprietary

Re: [Wireshark-dev] Plugin development on Windows...

2006-10-01 Thread Jaap Keuter
and display their content in legible form... Tobias -Urspr??ngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Jaap Keuter Gesendet: Sonntag, 1. Oktober 2006 07:48 An: Developer support list for Wireshark Betreff: Re: [Wireshark-dev] Question concerning

Re: [Wireshark-dev] Plugin development on Windows...

2006-10-01 Thread Jaap Keuter
dissector? Tobias -Urspr??ngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Jaap Keuter Gesendet: Sonntag, 1. Oktober 2006 14:00 An: Developer support list for Wireshark Betreff: Re: [Wireshark-dev] Plugin development on Windows... [heur] Hi

Re: [Wireshark-dev] conversations

2006-10-04 Thread Jaap Keuter
Hi, See README.developer chapter 2.2, and the epan/conversation.c is well documented. Thanx, Jaap On Wed, 4 Oct 2006, Brian Vandenberg wrote: What is a conversation? I've looked in a few of the readmes, I've looked in the developer's guide, and googled for it on the wireshark.org site,

Re: [Wireshark-dev] problems with fragmented reassembly on tcp

2006-10-04 Thread Jaap Keuter
Hi, Have you checked chapter 2.7 of doc/README.developer? I guess Wireshark already provides all the tools you need for this. Thanx, Jaap On Wed, 4 Oct 2006, Still Life wrote: Hi list, I'm fighting with tcp reassembling but i have always some problem. i have to dissect a protocol composed

Re: [Wireshark-dev] New dissector for Enea's LINX protocol

2006-10-04 Thread Jaap Keuter
Hi, You beat me to it. Still implemented a bunch of additional improvements. Hopefully Martin can give it a good testdrive. Thanx, Jaap On Wed, 4 Oct 2006, Anders Broman wrote: Hi, Oh I forgot - I rearranged the code to look more like other dissectors and made it a regular dissector not a

Re: [Wireshark-dev] New dissector for Enea's LINX protocol

2006-10-05 Thread Jaap Keuter
Hi, Now that we've added your dissector to the repository could you write up a protocol page in the Wiki? Oh, the sample capture goes onto SampleCaptures of course. Thanx, Jaap On Wed, 4 Oct 2006, Martin Peylo wrote: Hi, could anybody please check the attached dissector for Enea's LINX

Re: [Wireshark-dev] bug in packet-bgp.c (Ethereal) and print-bgp.c (tcpdump) (fwd)

2006-10-06 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Fri, 6 Oct 2006, Aaron Campbell wrote: The expression (BGP_OSPF_RTYPE_EXT ||BGP_OSPF_RTYPE_NSSA) will always evaluate to 1. As well, neither of these constants are defined as flag values, so a bitwise op was probably not intended either. Commit log for

[Wireshark-dev] When to include RTP player?

2006-10-08 Thread Jaap Keuter
Hi, Running configure without options, with portaudio-dev installed should build Wireshark with RTP player functionality. At least that is what this line in configure is saying: --with-portaudio[=DIR] use libportaudio (located in directory DIR, if supplied) for the rtp_player. [default=yes,

Re: [Wireshark-dev] urgent...ur attention plz

2006-10-08 Thread Jaap Keuter
Hello, Well, use an SNMP browser to get network statistics from the interface drivers. Thanx, Jaap On Sun, 8 Oct 2006, upasana saxena wrote: hello sir I am sorry for that.But can you please help me out in the matter that is how to get network statistics of any network or from any particular

Re: [Wireshark-dev] New dissector for Enea's LINX protocol

2006-10-09 Thread Jaap Keuter
, Martin On 10/5/06, Jaap Keuter [EMAIL PROTECTED] wrote: Hi, Now that we've added your dissector to the repository could you write up a protocol page in the Wiki? Oh, the sample capture goes onto SampleCaptures of course. Thanx, Jaap On Wed, 4 Oct

Re: [Wireshark-dev] Please help me, I need to automatize the calculation of Interarrival jitter??

2006-10-09 Thread Jaap Keuter
Hi, Without going into the details of the analysis, I would suggest to use the keyboard shortcuts to work the GUI from the macrorecorder, in order to export the statistics to a CSV file. From there you could perform any calculation you want. Thanx, Jaap On Mon, 9 Oct 2006, Andreina Toro wrote:

Re: [Wireshark-dev] Release (0.99.4) next week

2006-10-10 Thread Jaap Keuter
Hi, Blocker, by definition, means it blocks development or testing. ACK At work we classify bugs as: blocker blocks development, testing, or use of the feature. Now you've added or use of the feature. That can't be right, we would be flooded with blocker bugs. The classification is

Re: [Wireshark-dev] Query regarding malloc and ep_alloc

2006-10-10 Thread Jaap Keuter
Hi, Sure you can use malloc, but please read doc/README.malloc for all the benefits ep_alloc and friends provide. The fact that you get undefined reference means that you're working with old sourcefiles??? Thanx, Jaap On Tue, 10 Oct 2006, prashanth joshi wrote: Hi , can i use malloc to

Re: [Wireshark-dev] [PATCH] usb dissector

2006-10-10 Thread Jaap Keuter
Hi, These includes won't work on my Debian box: +#include pcap/bpf.h +#include pcap/usb.h Dependancy on pcap shouldn't be there. All is done via wiretap and if these are needed for defines or header sizes, they'll have to be included via #include pcap.h Thanx, Jaap On Tue, 10 Oct 2006, Paolo

Re: [Wireshark-dev] RTP-MIDI

2006-10-10 Thread Jaap Keuter
Hi, And on top of that, could the hardcoded values be replace by meaningfull symbols. Anders' remark may also remove the need for all those rather atypical text-string-printf-handling-add-type constructs. Thanx, Jaap On Tue, 10 Oct 2006, Anders Broman (AL/EAB) wrote: Hi, Couldn't the

Re: [Wireshark-dev] [PATCH] fix setup header parsing in usb dissector

2006-10-12 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Thu, 12 Oct 2006, Paolo Abeni wrote: hello, the attached patch fix parsing of the setup header in the usb dissector. Currently the size of the field specified into proto_tree_add_item call was wrong. Best regards, Paolo

Re: [Wireshark-dev] Writing a new packet dissector

2006-10-14 Thread Jaap Keuter
Hi, Oke, here it goes: RTFM's at www.wireshark.org Bit more to the point: What platform are you developing on? Wild guess Win32? Then look into the Wireshark Developer Guide, which has the step by step guide of setting up the build environment. With all that in place check out

Re: [Wireshark-dev] [PATCH] plugins/rdm: Update to ANSI E1.20-2006

2006-10-14 Thread Jaap Keuter
Hi, Some remarks: 1. The patch doesn't apply cleanly to the HEAD 2. Please keep the original Wireshark (C) in place and the GPL clause intact. 3. Now that it became an ANSI standard it's time to move this plugin to the regular dissectors. Thanx, Jaap On Sat, 14 Oct 2006, Shaun Jackman wrote:

Re: [Wireshark-dev] [PATCH] plugins/rdm: Update to ANSI E1.20-2006

2006-10-14 Thread Jaap Keuter
On Sat, 14 Oct 2006, Shaun Jackman wrote: Hello Japp, On 10/14/06, Jaap Keuter [EMAIL PROTECTED] wrote: Hi, Some remarks: 1. The patch doesn't apply cleanly to the HEAD Grumble. I'll re-diff. Ok. 2. Please keep the original Wireshark (C) in place and the GPL clause intact. I

Re: [Wireshark-dev] port tracking ?

2006-10-17 Thread Jaap Keuter
Hi, And how does that work with random access to the packets? Thanx, Jaap On Tue, 17 Oct 2006, Joerg Anders wrote: On Tue, 10 Oct 2006, Kukosa, Tomas wrote: See README.developer chapters 2.2-2.4 concerning conversations. Especially 2.4 Dynamic server port dissector registration Thank

Re: [Wireshark-dev] [Patch] bug fix in follow_dlg.c

2006-10-17 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Tue, 17 Oct 2006, Stephen Fisher wrote: While researching another bug in follow_dlg.c, I spotted a different one that causes the from and to hostnames/ip addresses to be the same in the follow tcp stream dialog only with IPv6. Please apply attached patch

Re: [Wireshark-dev] What tools do I need to process docbook xml files?

2006-10-18 Thread Jaap Keuter
Hi, See the README.txt in docbook. Thanx, Jaap On Wed, 18 Oct 2006, LEGO wrote: Could someone tell me what tools do I need to install on my box to process docbook xml files. Thanks, Luis ___ Wireshark-dev mailing list

Re: [Wireshark-dev] [PATCH] plugins/rdm: Update to ANSI E1.20-2006

2006-10-18 Thread Jaap Keuter
Hi, Checked in. Revision 19596. Thanx, Jaap On Tue, 17 Oct 2006, Shaun Jackman wrote: On 10/14/06, Shaun Jackman [EMAIL PROTECTED] wrote: ... 3. Now that it became an ANSI standard it's time to move this plugin to the regular dissectors. Okay. Will do. Cool.

[Wireshark-dev] Adding a license tab to About Wireshark

2006-10-18 Thread Jaap Keuter
Hi list, In view of recent discussions we could attribute to the presentation of the GPL by providing a license tab on the About Wireshark dialog, presenting the GPL as read from the COPYING file. The method will be the same as for authors-short file so GTK2 only, but that will get the bulk of

Re: [Wireshark-dev] Improvements to wlccp dissector

2006-10-19 Thread Jaap Keuter
Hi, The file didn't have any properties. It needs svn:eol-style and svn:keywords properties. Already committed a fix, so should work now Thanx, Jaap On Thu, 19 Oct 2006, Stephen Fisher wrote: On Tue, Oct 17, 2006 at 10:59:50AM +0200, Joerg Mayer wrote: On Mon, Oct 16, 2006 at 03:49:28PM

Re: [Wireshark-dev] Bug #1165 fix

2006-10-19 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Thu, 19 Oct 2006, Stephen Fisher wrote: Attached is a patch to fix bug #1165. To summarize: if you click on the button to change the background color and hit ok, it changes not only the name field but also the string field's color away from the red/green

Re: [Wireshark-dev] Wireshark 0.99.4pre1 is now available

2006-10-22 Thread Jaap Keuter
Hi, Sorry dude, since it's not yet picked up and we want no 'big' changes now I vote against it. The reason why it was not picked up? I don't know, but I would have to rework the code considerable before committing it, as I would want to get rid of the 10 level deep conditionals, the use of

Re: [Wireshark-dev] Wireshark 0.99.4pre1 is now available

2006-10-22 Thread Jaap Keuter
that, I noticed quite a few other plugins to use the add_text() pretty regularly - so what's the reason not to use it? Tobias -Urspr??ngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Jaap Keuter Gesendet: Sonntag, 22. Oktober 2006 12:35

Re: [Wireshark-dev] [Patch] Few small fixes to packet-wlccp.c

2006-10-22 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Sun, 22 Oct 2006, Stephen Fisher wrote: Here is a patch to make a few small fixes to packet-wlccp.c: * Null terminate one of the value strings that was missing it * Change a comment from LCC to LLC * Change the version variable from guint to guint8 to

Re: [Wireshark-dev] ACN plug-in for Wireshark

2006-10-23 Thread Jaap Keuter
Hi, Just attach the complete dissector (please make it a build in dissector, since it's an official protocol anyway) to an email and post it here. If it's any good, we'll pick it up. Thanx, Jaap On Mon, 23 Oct 2006, Bill Florac wrote: Developers, ETC has developed a Wireshark plug-in for

[Wireshark-dev] Pending stuff for 0.99.4

2006-10-23 Thread Jaap Keuter
Hi, In reference to Development/Roadmap, porting 19654 and 19666 to 0.99.4 sounds good to me. Thanx, Jaap ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

Re: [Wireshark-dev] [Patch] Fix for bug #1170

2006-10-25 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Tue, 24 Oct 2006, Stephen Fisher wrote: Attached is a patch to fix bug #1170: Wireshark interpretation of WBXML does not comply with Spec. This has been verified with the sample capture the user provided. Steve

Re: [Wireshark-dev] Bug 1088 question: SNMP Object Names not displayed in the info column

2006-10-25 Thread Jaap Keuter
Hi, I've been playing with some changes to the conformance and template file of the SNMP dissector, but haven't achieved this goal yet. Since I'm new to this asn2wrs stuff, it will take some more time to come up with the best solution. Thanx, Jaap On Wed, 25 Oct 2006, Stephen Fisher wrote:

Re: [Wireshark-dev] [Wireshark-users] root dispersion in NTP

2006-10-26 Thread Jaap Keuter
Hi, That is odd. All the code calls it root dispersion, but the text strings are clock dispersion. Fixed in revision 19705. Maybe it can be picked up for the 0.99.4pre2 release. Thanx, Jaap On Thu, 26 Oct 2006, Xiaoguang Liu wrote: in wireshark a NTP field is displayed as clock dispersion.

Re: [Wireshark-dev] Qestion about Wireshark parsing PPP protocol???

2006-10-27 Thread Jaap Keuter
Hi, The short answer is: yes this is PPP. The long answer is: With recent versions of WinPcap and Windows (don't ask details) it is possible to capture this stuff on a serial link (dialup conection). It is conviniently wrapped in a pseudo Ethernet header and handed to Wireshark to display. So

Re: [Wireshark-dev] OMG Still it doesn't compile!

2006-10-27 Thread Jaap Keuter
Hi, Are you sure you want to compile it with GCC in Cygwin? See http://wiki.wireshark.org/Development/CygwinGCC for the implications. Even though you'll need the cygwin tools to build, go to the Win32 command prompt to compile this stuff, don't use bash. Thanx, Jaap On Fri, 27 Oct 2006 [EMAIL

Re: [Wireshark-dev] Fetching of Structure from the tvb....

2006-10-28 Thread Jaap Keuter
Hi, You're getting the host format and transport format mixed up. The host format is based on the architecture for the platfom the code runs on. The transport format is defined by the protocol used to communicate. Between the two there is to be a translation layer, like the infamous netinet/in.h

Re: [Wireshark-dev] Win32: I've Changed config.nmake from GTK2.6 to GTK2.8

2006-10-29 Thread Jaap Keuter
Hi List, So this is a Call to all developers: please review all open GTK related bug reports (found at http://bugs.wiresark.org) and update them according to your findings with GTK 2.8. Thanx, Jaap On Sun, 29 Oct 2006, Ulf Lamping wrote: Hi List! I've changed the default setting for the

Re: [Wireshark-dev] Patch for epan/dissectors/packet-arp.c

2006-10-29 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Sun, 29 Oct 2006, Roger Gottsponer wrote: Hi list! This is my first email to this list. So first of all, I would like to thank everybody who contributed to this wonderful piece of software. It greatly helps me in my daily work and without wireshark,

Re: [Wireshark-dev] Help understanding Epan's dissectors

2006-10-29 Thread Jaap Keuter
Hi, Good question. For the answer you have to search further up the call chain. Lets see: file.c:add_packet_to_packet_list() epan/epan.c:epan_dissect_run() epan/packet.c:dissect_packet() epan/dissectors/packet-frame.c:dissect_frame() So when reading packets from a capture file, metadata (like

Re: [Wireshark-dev] Help understanding Epan's dissectors

2006-10-30 Thread Jaap Keuter
? I mean, who finds out that an ethernet packet is IP, and from that, which one is TCP, and from that, which one belongs to whatever program... Thanks, Ramiro Polla Quoting Jaap Keuter [EMAIL PROTECTED]: Hi, Good question. For the answer you have to search further up the call chain

Re: [Wireshark-dev] [patch] YMSG dissector update

2006-10-30 Thread Jaap Keuter
strings to be cleaner and easier to read. Gena01 On 9/18/06, Jaap Keuter [EMAIL PROTECTED] wrote: Hi, Checked in, with the additional change in the version number Thanx, Jaap On Mon, 18 Sep 2006, Gena01 wrote: This should cover most of the services

Re: [Wireshark-dev] Help understanding Epan's dissectors

2006-10-30 Thread Jaap Keuter
that's done. Thanks, Ramiro Polla Quoting Jaap Keuter [EMAIL PROTECTED]: Hi, Ah, so all is clear on the wiretap front. Well from there on (look in packet-frame.c) the frame dissector looks in wtap_encap_dissector_table for the dissector handling Ethernet (in this case). This dissector

Re: [Wireshark-dev] [PATCH] ICMPv6

2006-11-02 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Thu, 2 Nov 2006, Nicolas DICHTEL wrote: Hello, here is a patch that transforms valid lifetime and prefered lifetime in a prefix option (in RA) in human readable format. Following the RFC2461 Section 4.6.2, if the value is 0x, this means lifetime is

Re: [Wireshark-dev] Extraneous trailing comma in enum definition

2006-11-05 Thread Jaap Keuter
Hi, Hunting stuff like this all the time. Checked in. Thanx, Jaap On Sun, 5 Nov 2006, Albert Chin wrote: The IBM C compiler on AIX 4.3.3 doesn't accept a trailing comma after the last enum definition. Patch attached for stat_menu.h -- albert chin ([EMAIL PROTECTED])

Re: [Wireshark-dev] Buildin from tarball fails...

2006-11-06 Thread Jaap Keuter
Hi, Done. And removed the executable property from the icon file. Thanx, Jaap On Mon, 6 Nov 2006, Anders Broman (AL/EAB) wrote: Hi Wiresharkdoc.ico is missing from EXTRA_DIST = \ in top makefile.am Could some one check in a fix? BR Anders

Re: [Wireshark-dev] Don't need the chaff

2006-11-06 Thread Jaap Keuter
Hi, See this blurb in README.developer bitmask --- If the field is a bitfield, then the bitmask is the mask which will leave only the bits needed to make the field when ANDed with a value. The proto_tree routines will calculate 'bitshift' automatically from 'bitmask', by finding the

Re: [Wireshark-dev] Where do I get gmodule.h fordissectordevelopment

2006-11-06 Thread Jaap Keuter
:[EMAIL PROTECTED] On Behalf Of Jaap Keuter Sent: 06 November 2006 12:46 To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Where do I get gmodule.h fordissectordevelopment Hi, Please follow ALL STEPS in part 1 of the developer guide. I tell you this because I know you

Re: [Wireshark-dev] Replace ntohl() with g_ntohl()

2006-11-06 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Mon, 6 Nov 2006, Albert Chin wrote: Patch attached to convert usage of ntohl() - g_ntohl(). On HP-UX, ntohl() isn't available unless you -D_XOPEN_SOURCE_EXTENDED but there are other uses of g_ntohl(). -- albert chin ([EMAIL PROTECTED])

Re: [Wireshark-dev] Use of gcrypt and gnutls in version_info.c

2006-11-07 Thread Jaap Keuter
Hi list, He must have missed the memo that we're all gone working on Wireshark. ;) Thanx, Jaap On Tue, 7 Nov 2006, Guy Harris wrote: Joerg Mayer wrote: Hmm, the fix is correct, but if we need to links dumpcap with gnutls just to handle the version stuff, then something more fundamental

Re: [Wireshark-dev] Use of gcrypt and gnutls in version_info.c

2006-11-07 Thread Jaap Keuter
On Tue, 7 Nov 2006, Guy Harris wrote: Jaap Keuter wrote: He must have missed the memo that we're all gone working on Wireshark. ;) So when do we rename the epan directory wpan? :-) When hell freezes over! Oh wait, that already happend when Debian Sarge was released

Re: [Wireshark-dev] cygpath: cannot create short name of C:\wireshark-win32-libs

2006-11-07 Thread Jaap Keuter
Hi, Yeah, that is what he said. Thing is that it shouldn't happen. What's cygpaths problem? Thanx, Jaap On Tue, 7 Nov 2006, LEGO wrote: You can create an emty dir on c:\ and rename it in config.nmake:32 WIRESHARK_LIBS=C:\wireshark-win32-libs On 11/7/06, Robert Trybis [EMAIL PROTECTED]

Re: [Wireshark-dev] Release 00.99.4 missing file?

2006-11-07 Thread Jaap Keuter
Hi, This stuff is wierd. First cygpath that acts up, now it's env that can't find python from /usr/bin/ It seems that path isn't working. Do you have a nondefault cygwin installation? Maybe it's the filesystem type, what type is it? Thanx, Jaap ___

Re: [Wireshark-dev] Questions about dev

2006-11-08 Thread Jaap Keuter
Hi, I'm all for that. I personally don't like extending Wireshark into the realm of trace file analyser. Thanx, Jaap On Wed, 8 Nov 2006, Kukosa, Tomas wrote: Hello, I use a little bit differen solution for a similar problem. Sometimes I need to dissect proprietray protocols from

Re: [Wireshark-dev] Release 00.99.4 missing file?

2006-11-08 Thread Jaap Keuter
On Wed, 8 Nov 2006, Robert Trybis wrote: Hello, Peter hit the nail on the head, it's the Windows PATH variable. The cygwin installation does not set an environment variable to allow python to be found. Also all the stuff that accumulates in the PATH environment variable can confuse things,

Re: [Wireshark-dev] Release 00.99.4 missing file?

2006-11-08 Thread Jaap Keuter
Hi, It's only now that I see it Robert Trybis wrote: I am in C:\Program Files\wireshark which is where I installed the sources using SVN and I am using the commands you mentioned; You've actually put the sources where the installation is going to be? For one that is considered poor style

Re: [Wireshark-dev] This application has failed to start because wiretap-0.3.dll was not found

2006-11-13 Thread Jaap Keuter
Hi, Congrats! Thanx, Jaap On Mon, 13 Nov 2006, Robert Trybis wrote: Yes! Running from wireshark-gtk2 means the dll is found. I have managed build the system and capture data. Thanks RT ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org

Re: [Wireshark-dev] Wireshark / Tshark 0.99.4 crashes with Segmentation fault where p rev. version worked

2006-11-13 Thread Jaap Keuter
Hi, 110MB is certainly a big trace. I guess you have a rough idea at which part of the capture file the crash occurs. Can your 'editcap' that piece out of the big capture and check if the problem remains? You could also cut it in 5 x 22MB pieces, which should easily load into Wireshark one by

Re: [Wireshark-dev] Continuing support for ucd-snmp?

2006-11-13 Thread Jaap Keuter
Hi, If all our supported platforms agree on this we can vote for net-snmp only. Thanx, Jaap On Mon, 13 Nov 2006, Stephen Fisher wrote: On Tue, Nov 14, 2006 at 12:23:29AM +0100, Joerg Mayer wrote: usb-nsmp has been superceeded by net-snmp for quite a while now. ucd-snmp is unmaintained.

Re: [Wireshark-dev] Need help on Reassembly and building ethereal on windows.

2006-11-14 Thread Jaap Keuter
Hi, Two remarks: 1. Why use such ancient source code? 2. Detailed development instruction can be found in the Developer Guide found on the website www.wireshark.org Thanx, Jaap On Tue, 14 Nov 2006, Annie Misha wrote: Hi all, We have added E-GCDR parsing support for GTP' protocol into

Re: [Wireshark-dev] (no subject)

2006-11-14 Thread Jaap Keuter
Hi, See http://www.wireshark.org/docs/wsug_html_chunked/ChIntroPlatforms.html#id4721855 Sorry. Thanx, Jaap On Tue, 14 Nov 2006, henry cox wrote: Hello. I have downloaded installed wireshark 0.99.4 on a pentium3/667 running win98se I am connected to the web via a broadband cable modem

Re: [Wireshark-dev] Regarding bug 948 - capture vs preferences

2006-11-15 Thread Jaap Keuter
Hi, On Wed, 15 Nov 2006, Stephen Fisher wrote: I am looking at bug #948, Apply capture preferences not applying. The problem reported is that if you update a preference such as Update list of packets in real time and hit apply/OK then go to the capture options screen, the change is not

  1   2   3   4   5   6   7   8   9   10   >