Re: [Wireshark-dev] [patch] SDP key-mgmt + MIKEY dissectors

2007-03-05 Thread Jaap Keuter
Hi, Thank you for doing this work. Puts Wireshark at the bleeding edge :) One request though: could you make this into a normal dissector, not a plugin? It already depends on changes in the build-in SDP dissector, so it should be added as a build-in as well. Thanx, Jaap On Mon, 5 Mar 2007,

Re: [Wireshark-dev] Dissect a packet base header bits

2007-03-06 Thread Jaap Keuter
) - Header|Message if first 3 bits (type) is 000 Header|Binary Data 001 Header|Message|Binary Data 111 - On 3/6/07, Jaap Keuter [EMAIL PROTECTED] wrote

Re: [Wireshark-dev] Query on status of patches

2007-03-08 Thread Jaap Keuter
Hi, I can see your frustration. You like to be appreciated for the work done on creating a feature/patch you want to share with the world. That is what OSS is all about. On the other hand the project owner' has to walk a fine line, getting enough committers in, who don't get compensation, while

Re: [Wireshark-dev] private development and syncing process ...

2007-03-09 Thread Jaap Keuter
Hi, Indeed these are the steps to take. Don't distribute outside your company without providing the sources. Thanx, Jaap On Fri, 9 Mar 2007, Ravi Kondamuru wrote: Hi, I am looking for a model on how wireshark dissector/wiretap addons are developed exclusively for use within a company. I

Re: [Wireshark-dev] Wireshark APIs for display

2007-03-09 Thread Jaap Keuter
Hi, I've seen it been done. It was based on a message decoder that passed back a data structure of the message. Then there was a whole bunch of wireshark code to display all the structure members. Varying messages had varying structures so it ended up being a whole lot of

Re: [Wireshark-dev] I would to make a dissector for ms binl protocol

2007-03-19 Thread Jaap Keuter
Hi, Webpage looks good. You can find all you need to know for setting up a development environment in the developer guide on the website documentation section. The source tree contains a doc directory with README files. README.developer is what you want to read. Thanx, Jaap On Mon, 19 Mar 2007,

Re: [Wireshark-dev] AMQP dissector - alpha version

2007-03-21 Thread Jaap Keuter
Hi, Send it to list (if not too big) or open a bugzilla item for it. We'll have a look. If it doesn't break stuff, it should be fine. Have a look in the developer guide and Wiki about submitting patches. Thanx, Jaap On Wed, 21 Mar 2007, Martin Sustrik wrote: Hi all, I've written dissector

Re: [Wireshark-dev] [Wireshark-users] Support for Microsoft LLTD Protocol

2007-03-21 Thread Jaap Keuter
Hi, I've added the Ethernet type (88D9) for it. Someone looking for a project can goto http://www.microsoft.com/whdc/Rally/LLTD-spec.mspx for the spec. A sample capture would be nice as well. Thanx, Jaap On Tue, 20 Mar 2007, Stephen Fisher wrote: On Tue, Mar 20, 2007 at 06:08:23PM +0530,

Re: [Wireshark-dev] AMQP dissector - alpha version

2007-03-22 Thread Jaap Keuter
Hi, I don't understand. Do you want to share the object/DLL, or the complete WS source code, or create a patch? Or are you worried about distribution in the GPL sense? Thanx, Jaap On Thu, 22 Mar 2007, Martin Sustrik wrote: Hi, The question I've actually wanted to ask was: Is there a way to

[Wireshark-dev] Lifehacker DoD

2007-04-24 Thread Jaap Keuter
Uh oh, We've become download of the day at Lifehacker: http://lifehacker.com/software/networking/download-of-the-day-wireshark-all-platforms-254218.php Thanx, Jaap ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org

[Wireshark-dev] Broken build on GCC 4.1.2

2007-04-25 Thread Jaap Keuter
Hi, Revision 21563 breaks my build on several places, using GCC 4.1.2 on Debian lenny/sid. I already hacked packet-ipsec.c, but next up is packet-bpdu.c, reporting: cc1: warnings being treated as errors packet-bpdu.c: In function 'dissect_bpdu': packet-bpdu.c:252: warning: pointer of type 'void

Re: [Wireshark-dev] New disesector for Juniper NSRP

2007-04-27 Thread Jaap Keuter
Hi, Nice clean patch. Committed in revision 21599. Thanx, Jaap On Fri, 27 Apr 2007, Secfire wrote: Hi Dev, Attachment is a patch for adding a new Juniper NSRP dissector. In this patch, OICQ author email address [EMAIL PROTECTED] has also been updated to [EMAIL PROTECTED]. Later I will

Re: [Wireshark-dev] Patch Netflow v9 to decode Netflow options, and other fixes

2007-04-27 Thread Jaap Keuter
Hi, Patch looks good, not too sure about the to_hexadecimal though. Thanx, Jaap On Fri, 27 Apr 2007, Olivier MONTANUY wrote: Hello, I opened a a bug report #1579 to signal that epan/dissectors/packet-netflow.c currently cannot decode Netflow options, because it does not take into account

Re: [Wireshark-dev] [PATCH] ppp_hdlc in sll

2007-05-02 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Wed, 2 May 2007, Matt Addison wrote: Problem: The existing sll dissector does not handle ppp_hdlc packets (sll.ltype == 0x0007). Resolution: Alter packet-sll.c to call the ppp_hdlc dissector when a packet with sll.ltype=0x0007 is received. Why: Bringing

[Wireshark-dev] Build is breaking several places

2007-05-04 Thread Jaap Keuter
Hi people, The build is breaking in several places, so lets get it green again. One problem is with the h245 changes by Anders. A missing type in the template. Another is with winreg.c. My own build breaks at a missing rule to make asn1.lo. Thanx, Jaap

Re: [Wireshark-dev] How to get plugin version from myPlugin.dll ?

2007-05-09 Thread Jaap Keuter
Hi, I've incorporated the Win32 resources starting from the 0.99.5 release, so that's why your code probably doesn't have these resources. One thing you can do is use the strings utility, which tries to display everything that looks like a string in an executable file. sysinternals' process

Re: [Wireshark-dev] distclean and build errors

2007-05-11 Thread Jaap Keuter
Hi, I ended up hacking the wget config file, setting the proxy stuff there. Thanx, Jaap On Fri, 11 May 2007, Stephen Fisher wrote: On Thu, May 10, 2007 at 04:28:02PM -0600, Tyler De Haven Brown wrote: P.S.-I had to download the files manually, because even when setting the http_proxy

[Wireshark-dev] GTK 2.10.12

2007-05-12 Thread Jaap Keuter
Hi list, From http://mail.gnome.org/archives/gnome-announce-list/2007-May/msg5.html - GTK+ 2.10.12 released * From: Matthias Clasen mclasen redhat com * To: gnome-announce-list gnome org, gtk-devel-list gnome org,

[Wireshark-dev] OpCua faulty checkin and breaks the build

2007-05-14 Thread Jaap Keuter
Hi, Multiple things are wrong with the recently added OpCua plugin: - There are no properties on the directory or the files, - The headers are missing from the Makefile.common, breaking the dist, - Not all DISSECTOR_SRC are dissector main entry point. The rest should be in the

Re: [Wireshark-dev] [PATCH] Improved support for MIPv4

2007-05-16 Thread Jaap Keuter
Hi, Some additional notes: + {REGISTRATION_REVOCATION, Registration Revocation}, + {REGISTRATION_REVOCATION, Registration Revocation Acknowledgement}, The second one misses _ACKNOWLEDGEMENT in the symbol {0, NULL}, }; Don't put a comma after the last initializer. It's just poor style.

Re: [Wireshark-dev] OpCua faulty checkin and breaks the build

2007-05-16 Thread Jaap Keuter
Hi, The opcua plugin came a long way. :)) Two more questions though. Do we need to include gmodule.h everywhere? I think including glib.h is what's needed. Do we need to link against dissectors.lib ? (LINK_PLUGIN_WITH=..\..\epan\libwireshark.lib ..\..\epan\dissectors\dissectors.lib) I can't

[Wireshark-dev] Please test fix Critical bug 1360

2007-05-16 Thread Jaap Keuter
Hi list, Can someone test the current Windows build against the capture in bug 1360? It's a critical bug we need to get closed, like the other 13 criticals. Since we've almost 200 bugs open, 14 critical, we need to get cracking at them before we're going to see a release anytime soon. Thanx,

[Wireshark-dev] PAD file and automatic version checking

2007-05-16 Thread Jaap Keuter
Hi Gerald, On the Wireshark download page a PAD file can be found that can be used for version checking. Version checking is an item on the release list for .6 (Win32). What I can't figure out is how the update is being checked on the client PC? How/by what software is the PAD file being checked

[Wireshark-dev] bugfix for 1550

2007-05-23 Thread Jaap Keuter
Hi list, Can our TCP dissection experts have a look at the proposal in bug 1550? http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1550 Seems like a valuable improvement, but I can't judge all implications. Thanx, Jaap ___ Wireshark-dev mailing list

Re: [Wireshark-dev] Packet Playback with Wireshark

2007-05-23 Thread Jaap Keuter
Hi, No. See http://wiki.wireshark.org/Tools Thanx, Jaap On Wed, 23 May 2007, James McLellan wrote: Hi, Is there a capability in Wireshark (or a plugin) to allow playback of captured packets? ___ Wireshark-dev mailing list

Re: [Wireshark-dev] patch for new encapsulation protocol FCoE - Fibre Channel over Ethernet

2007-05-24 Thread Jaap Keuter
Hi, The code looks oke, one question though. Why is the ethertype in a preference? Are there non-IEEE-ethertype-standard implementations in the wild, or is this a development left over? If so, better get it out. A sample capture would be usefull for fuzztesting, so yes please. Thanx, Jaap On

Re: [Wireshark-dev] proposed change for packet-ssl-utils.h

2007-05-25 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap On Thu, 24 May 2007, Brian Vandenberg wrote: I ran into a problem trying to debug some of my stuff yesterday that depends on the http dissector, and the server I'm working with defaults to ssl traffic; whenever I try to debug it, it always gets hung up on the

Re: [Wireshark-dev] Dissectors

2007-05-25 Thread Jaap Keuter
Hi, For one the eth_handle is most likely a module global variable, so used elsewhere. Could you name the dissector you saw this in? The other thing to notice is that it is not very smart to quote your registration info, including password, in a public mailing list. Better change is REAL

Re: [Wireshark-dev] problem building wireshark

2007-06-11 Thread Jaap Keuter
Hi, Sure, give us some info on the environment you're building in. Compiler, tarball or SVN checkout, OS, stuff like that. Thanx, Jaap On Mon, 11 Jun 2007, Tyler De Haven Brown wrote: I'm new to wireshark and having problems with the first build Get the following error message box:

Re: [Wireshark-dev] unresolved external symbol _tvb_get_ephemeral_faked_unicode

2007-06-12 Thread Jaap Keuter
into issues. Thanks, Tyler Original message Date: Tue, 12 Jun 2007 07:44:40 +0200 (CEST) From: Jaap Keuter [EMAIL PROTECTED] Subject: Re: [Wireshark-dev] problem building wireshark To: Developer support list for Wireshark wireshark-dev@wireshark.org Hi, Sure

Re: [Wireshark-dev] Patches to update PANA Protocol dissector

2007-06-13 Thread Jaap Keuter
Hi, Could you recreate the patch against the current tree? Your revision 21417 is too old and doesn't apply. Thanx, Jaap Victor Fajardo wrote: To wireshark-maintainers, Attached is a patch file for the PANA protocol dissector. The changes updates the packet-pana.c dissector to support

Re: [Wireshark-dev] Patches to update PANA Protocol dissector

2007-06-14 Thread Jaap Keuter
Hi, Committed in revision 22098. Thanx, Jaap Victor Fajardo wrote: Hi, Attached is a patch based on rev 22093. regards, victor Hi, Could you recreate the patch against the current tree? Your revision 21417 is too old and doesn't apply. Thanx, Jaap Victor Fajardo wrote:

Re: [Wireshark-dev] edonkey

2007-06-18 Thread Jaap Keuter
Hi, Committed in revision 22128 after a few changes: - replaced C++ with C comments - replaced %llu format string by % G_GINT64_MODIFIER u Thanx, Jaap Łukasz M. wrote: Hi. I'm new here, so hello everyone. :) I added 5 new packets to packet-edonkey.c and improve 2. Diffs in attachment.

Re: [Wireshark-dev] X.25, LAPB, PLP Decoding

2007-06-18 Thread Jaap Keuter
Hi Mirko, Please refer to http://wiki.wireshark.org/Development/LibpcapFileFormat about this subject. Thanx, Jaap [EMAIL PROTECTED] wrote: Hi, I’ve been making Protocol Analyzer based on Sangoma S5142A synch serial card and WireShark. Capturing of X.25 LAPB and PLP layers is done by

Re: [Wireshark-dev] wireshark-0.99.5 Segmentation fault on displaying packets

2007-06-18 Thread Jaap Keuter
Hi, Can you run Wireshark in DDD so you can get a backtrace? See http://wiki.wireshark.org/Development/Tips Thanx, Jaap yin sun wrote: Hello, I have compiled wireshark from 0.99.5 source on Suse10 Linux 2.6.16.27-0.9-smp x86. Initial launch is ok, change/save preference is ok, but

Re: [Wireshark-dev] [Patch] Unistim dissector plugin

2007-06-19 Thread Jaap Keuter
Hi, The plugin looks good, now we need some sample captures for a testdrive (fuzztest). Can you whip up a Wiki protocol page and add the sample captures? Thanx, Jaap Newton, Don wrote: I have corrected all deficits that were noted. I also have changed so rudp sequence id shows in info

Re: [Wireshark-dev] od for Windows?

2007-06-20 Thread Jaap Keuter
Google is your best friend. http://www.kmrconsulting.com/free_download.html Thanx, Jaap Martin Mathieson wrote: Thanks Luis, I want to avoid turning the laptop I was using yesterday into another dev machine :) Martin On 6/19/07, Luis EG Ontanon [EMAIL PROTECTED] wrote: what about

Re: [Wireshark-dev] [Patch] Unistim dissector plugin [Sample captures attached]

2007-06-20 Thread Jaap Keuter
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jaap Keuter Sent: Tuesday, June 19, 2007 5:01 PM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] [Patch] Unistim dissector plugin Hi, The plugin looks good, now we need some sample captures for a testdrive

Re: [Wireshark-dev] [Patch] Unistim dissector plugin [Sample captures attached]

2007-06-20 Thread Jaap Keuter
or tomorrow. Don Newton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jaap Keuter Sent: Tuesday, June 19, 2007 5:01 PM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] [Patch] Unistim dissector plugin Hi, The plugin looks

Re: [Wireshark-dev] Which install files have changed based on source modifications

2007-06-26 Thread Jaap Keuter
Hi, This sounds all overly complicated. You could deduce which executable/DLL is affected by you changes by unraveling the build process, but it's much easier to build you own full installer. Thanx, Jaap Greg Bell wrote: Hello, I'd like to make some modifications to Wireshark and package

Re: [Wireshark-dev] Beginner article for custom dissector now on Code Project

2007-07-01 Thread Jaap Keuter
Hi Ken, Did a quick review of your article. These are the point you could improve. 8--- 7.0 Your Dissector Code You can use a text editor of your choice to open the packet-yourprotocol.c. Let's take it line by line: #ifdef HAVE_CONFIG_H # include config.h #endif #include

[Wireshark-dev] Debian package files for 0.99.6

2007-07-02 Thread Jaap Keuter
Hi Frederic, I noticed that Wireshark 0.99.6pre1 came in on testing so it would be great if you can send the new package files to the list so they can be put into the repository before the real 0.99.6 comes out. Thanx, Jaap ___ Wireshark-dev mailing

Re: [Wireshark-dev] 0.99.6 release postponed

2007-07-03 Thread Jaap Keuter
Hi, Now that WinPcap 4.0.1 is out a release of 0.99.pre3 is possible. I would like to request holding off until I've got the debian packaging updates from Frederic Peters in, which I've got lined up in my working copy. Tomorrow morning, when I'm fresh and sober, I'll review them one last time

Re: [Wireshark-dev] 0.99.6 release postponed

2007-07-04 Thread Jaap Keuter
been assigned Brisket Duty. :) Jaap Keuter wrote: Hi, Now that WinPcap 4.0.1 is out a release of 0.99.pre3 is possible. I would like to request holding off until I've got the debian packaging updates from Frederic Peters in, which I've got lined up in my working copy. Tomorrow morning

Re: [Wireshark-dev] diameter dissector and ntp timestamp rollover

2007-07-05 Thread Jaap Keuter
Hi, You could play around with ntp_fmt_ts(const guint8 *reftime) and see what happens. That function is found in packet-ntp.c and the source for the code in packet-diameter.c. Thanx, Jaap cco wrote: hi! the people designing ntp came up with a timestamp format which rolls over every 136

Re: [Wireshark-dev] Wireshark 0.99.6 is now available

2007-07-06 Thread Jaap Keuter
Hi, It would have been nice if it contained an up to date user manual i.s.o. a 5 month old version. Could that item be added to the release procedure? I've already checked in a patch that proposes to install WinPcap 4.0.1 over 4.0.0, which the current installer doesn't do. Thanx, Jaap Gerald

Re: [Wireshark-dev] Wireshark conference

2007-07-06 Thread Jaap Keuter
Hi, I think everyone should bring his passport so we can address Bug 1086. Thanx, Jaap Gerald Combs wrote: This is entirely hypothetical, but if someone were to host a 3-day Wireshark conference, what sort of sessions would you be interested in? If enough developers attended, would there be

Re: [Wireshark-dev] How do I call anothes dissector

2007-07-07 Thread Jaap Keuter
Hi, See the README.developer file in the doc directory, chapter 1.8 Calling Other Dissectors. Thanx, Jaap Yashwant Shitoot wrote: Hello, My protocol is encapsulated in udp. I am able to dissect this part without problem. The remaining data I need to pass to another protocol RTCP or

Re: [Wireshark-dev] Run-time error (samr.hnd disappeared)

2007-07-09 Thread Jaap Keuter
Hi, In the mean time let me remind everyone it is not allowed to simply drop preferences from your code. Once it's in there it's in the preference files and warnings like this appear if you do take it out. The mechanism to solve this is by replacing your preference registration by:

Re: [Wireshark-dev] Patches to update PANA Protocol dissector

2007-07-09 Thread Jaap Keuter
Hi, Committed in revision 22282. Thanx, Jaap Victor Fajardo wrote: Hi Jaap, I found a small problem with the previous patch I've sent. I've attached a patch that fixes this issue; the patch is based on the latest rev I could get. regards, victor Hi, Committed in revision 22098.

Re: [Wireshark-dev] size of wireshark installation files

2007-07-10 Thread Jaap Keuter
Hi, Should we make dissector_add() and friends fail silently when the referenced dissector is not available? Currently the g_assert() is killing, while a return would suffice. This becomes more relevant since we can delete a dissector on the fly, so we may run into this assert while not

Re: [Wireshark-dev] New WiMAX R6 plug-in

2007-07-10 Thread Jaap Keuter
Hi, First thing to so it testdrive it using fuzztest. Have a collection of capture files ready which fuzztest will feed to your Wireshark+plugin. That way you may find bugs not found during code review. Then make sure all support files are in as stated in README.plugin. Then 'make clean' the

Re: [Wireshark-dev] [patch] fix omission in wcap.c

2007-07-12 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap Jim Paris wrote: Hi, The encap_table_base in wcap.c is missing an entry. This causes e.g. dumpcap -i usb3 -L to output: Data link types (use option -y to set): USB_LINUX (MPEG) -jim diff -urN --exclude=debian

Re: [Wireshark-dev] Solaris C compiler doesn't like anonymous unions

2007-07-13 Thread Jaap Keuter
Hi, Added a remark to README.developer to that effect. Thanx, Jaap Albert Chin wrote: Fix to avoid anonymous union which Sun Studio 11 C compiler doesn't like. ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org

Re: [Wireshark-dev] [Wireshark-commits] rev 22259: /trunk/packaging/nsis/ /trunk/packaging/nsis/: wireshark.nsi

2007-07-13 Thread Jaap Keuter
Hi, Then maybe you've a scheme how to work this into the installer as well? I've tried but failed to see a future proof construct. Thanx, Jaap Gianluca Varenni wrote: - Original Message - From: Ulf Lamping [EMAIL PROTECTED] To: wireshark-dev@wireshark.org Sent: Thursday, July 12,

Re: [Wireshark-dev] Win32: remove binary zlib.dll completely and compile it for all MSVC variants?

2007-07-13 Thread Jaap Keuter
Graham Bloice wrote: Ulf Lamping wrote: Hi List! After I repeatedly stumbled over not having the right form of the zlib.dll on my computer (MSVC6: binary dll, all other MSVC: compile it yourself from sources) and the setup target only downloads one of them, it makes me think to drop the

Re: [Wireshark-dev] decode data display the same

2007-07-16 Thread Jaap Keuter
NKS wrote: Sub: how can i hack wireshark to show the actual data(decoded) ? Please have a look at the following screenshot(wireshark) hxxp://img512.imageshack.us/img512/1255/data1448bytesyb7.jpg ( same screenshot also available at the following link hxxp://i11.tinypic.com/4qr3j48.jpg ) I

Re: [Wireshark-dev] error in changing from built in to plugin

2007-07-16 Thread Jaap Keuter
Hi, You'll need a maintainer clean for that. Or maybe deleting epan/dissectors/register.* is enough. Thanx, Jaap Yashwant Shitoot wrote: Hello, I am changing my dissector from built in to plugin removed it from Makefile.common in 'epan/dissectors'. Added everywhere according to

Re: [Wireshark-dev] Windows Vista compilation

2007-07-21 Thread Jaap Keuter
Hi, it's specifically talking about 'Windows SDK for Windows Vista', not vc2005ee on Vista, so this should be oke. You may want to consider working with 0.99.6 sources though. Thanx, Jaap sandeep gangadharan wrote: Hello all Will my compillation work with vc2005ee+windows

Re: [Wireshark-dev] Toolbar icon sizes on Windows too small?

2007-07-24 Thread Jaap Keuter
Hi, Look for gtkrc and see that it declares two toolbars: large and small. The small one is used, but changing this into large gets you the larger icons. Thanx, Jaap Ulf Lamping wrote: Just out of curiosity, i noticed the size of toolbar icons in the Windows version is rather small. They

Re: [Wireshark-dev] [PATCH] packet-bootp.c: enhancement to decode DHCP option 121

2007-07-24 Thread Jaap Keuter
Hi, Checked in. Thanx, Jaap Francois-Xavier Le Bail wrote: Hi, The following patch decode DHCP option 121. (RFC 3442) Output example : Option: (t=121,l=59) Classless Static Route Option: (121) Classless Static Route Length: 59 Value:

Re: [Wireshark-dev] New WiMAX R6 plug-in

2007-07-25 Thread Jaap Keuter
Hi, Overruns aren't a problem as long as you end the value_string array with the closing tuple {0, NULL}. Thanx, Jaap Nitin Naveen wrote: Hello, Thank you Martin and Sawada san for your comments. I am OK with any plug-in name and I leave it up to you to decide. I also accept most of the

Re: [Wireshark-dev] .NET Based Dissector Plugin

2007-07-25 Thread Jaap Keuter
Hi, I would say a page below http://wiki.wireshark.org/Development Thanx, Jaap Kelvin Proctor wrote: G'day Wireshark Team, In the last few days I have succeeded in getting a dissector plugin running that is a mixed-mode C++ assembly (for those unfamiliar with Microsoft.NET this dll is

[Wireshark-dev] Wierd code in m2m plugin

2007-07-27 Thread Jaap Keuter
Hi, Can anyone tell me why this hideous hack is in the m2m plugin? case TLV_FRAME_NUM: /* get the frame number */ g_frame_number = tvb_get_ntoh24( tvb, offset );

Re: [Wireshark-dev] [PATCH]: New packet disscetor for IEEE1588v2 / PTPv2

2007-07-30 Thread Jaap Keuter
Hi Markus, Two things. First we've recently changed our patch submission policy, instead of posting to the lis you can attach you patches to a bugzilla entry and request review for submission. This is done to not let patches, like yours, get overlooked. Second you patch reverts back to the

Re: [Wireshark-dev] bug in SHIM6 control message - UPD REQ and UPD ACK

2007-08-01 Thread Jaap Keuter
Hi, Better file a bugreport on that. Thanx, Jaap On Wed, 1 Aug 2007 [EMAIL PROTECTED] wrote: Folks in epan/dissector/packet-ipv6.h there is a mistacke in the assigned number of the update request and update ack shim6 control message. Accordingly to draft-ietf-shim6-proto-08 page 93 the

Re: [Wireshark-dev] doubt regarding the creation of a disector for the PCE protocol

2007-08-07 Thread Jaap Keuter
Hi, Wireshark can help you here. See doc/README.developer, chapter 2.7.1 Using tcp_dissect_pdus(). Thanx, Jaap Silvia Cristina Tejedor wrote: Dear Mr, I m working on the packet reception and treatement with the PCE protocol which runs over TCP. The PCE protocol takes the TCP data and

Re: [Wireshark-dev] Patches to update PANA Protocol dissector

2007-08-07 Thread Jaap Keuter
Hi, Two things. 1. We've recently changed the patch submission policy to go through bugzilla. This in order to have patches like this not overlooked. 2. I can't comment on the merits of the patch in relation to the draft referenced, but I've spotted this code error: /* Reserved field

Re: [Wireshark-dev] [Patch] Unistim dissector plugin [Sample captures attached] (fwd)

2007-08-10 Thread Jaap Keuter
Hi Don, This is the last message I've sent about UNISTIM. Since then nothing was heard. Still we would like to get it in, since there's interest in it. Are you still working on it? Thanx, Jaap -- Forwarded message -- Date: Thu, 21 Jun 2007 08:47:19 +0200 From: Jaap Keuter [EMAIL

Re: [Wireshark-dev] Nortel Unistim Protocol PDF

2007-08-10 Thread Jaap Keuter
Hi, You may want to follow the external link listed. Thanx, Jaap J P wrote: Hi Everyone, Where can I get a copy of the Nortel Unistim Protocol Specification PDF referred in http://wiki.wireshark.org/UNISTIM? Wireshark The Unistim dissector is partially

Re: [Wireshark-dev] p2p_dir

2007-08-11 Thread Jaap Keuter
Oh no, not this flamewar again... On the plus side: yes, your development cycle and intermediate release is easier. On the min side: You don't have the full API (on Win32 that is). IMHO when a protocol is complete (stable RFC or whatever standard bodies publish) and dissector is fully

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-11 Thread Jaap Keuter
Hi, A unistim plugin for Wireshark is in the works. It's currently at the stage of fuzztesting, which shows some problems. Once that's done it's complete and added to the repository. Thanx, Jaap J P wrote: Hi Everyone, This may be off topic, but it may be useful in the development of the

Re: [Wireshark-dev] MIB parsing unnecessary

2007-08-13 Thread Jaap Keuter
Hi, There's a long standing bug on this: bug 1088. Fixing that would be most appreciated. Thanx, Jaap Luis EG Ontanon wrote: You'll keep that feature :-) char* format_oid_decoded(guint8* oid, guint32 len) { char* result; guint32 matched; oid_info_t* oid_info =

Re: [Wireshark-dev] [PATCH] Status code for PMIPv6

2007-08-14 Thread Jaap Keuter
Hi, Checked in. Please note that the new way of sending patches is through bugzilla. This to make sure patches, like these, don't end up being overlooked. Thanx, Jaap Nicolas Dichtel wrote: Hi, please find enclosed a patch to update BA status code for PMIPv6 according to

Re: [Wireshark-dev] Finding the bug in the unistim dissector

2007-08-15 Thread Jaap Keuter
Luis EG Ontanon wrote: Might be a buffer overflow overwriting it. - break after protocol registration. - find the object that gets altered, - set a watchpoint on that memory location - continue until the watchpoint tells you who and where it gets overwritten. Luis On 8/15/07, Jaap Keuter

Re: [Wireshark-dev] Adding changes to Wireshark appearance

2007-08-19 Thread Jaap Keuter
Hi, That would be image/wssplash.xpm. Thanx, Jaap On Sun, 19 Aug 2007, Michal Kelner wrote: Hi, I would like to add some changes in the WS GUI, editing the icon a little bit (adding some graphics to it), while still keeping its original look-and-feel. I've made some changes in /image

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, The unistim plugin was added to the repository in revision 22558. The buildbot builds are in the download section. Thanx, Jaap Jaap Keuter wrote: Hi, A unistim plugin for Wireshark is in the works. It's currently at the stage of fuzztesting, which shows some problems. Once that's

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
4f 4e 4b 17 0a 1b 04 20 05 .GRONK . 0070 34 32 32 30 17 06 10 81 04 24 4220.$ Do you know what I am doing wrong so that I am seeing only data and not the Unistim Decode? Thanx, John *From*: Jaap Keuter [EMAIL

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, Ahh crap. Installers, you think you've got them all. Not so :/ Thanx, Jaap Guy Harris wrote: J P wrote: I do not see a UNISTIM plug-in in the C:\Program Files\Wireshark\plugins\0.99.7-SVN-22562 directory or an updated RUDP.DLL file. Does one have to do something specific to

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, I can tell you that it's decoded fine. A call to 2600 and a few seconds RTP with you blowing in the mic twice ;) Just give the buildbot a little time to spit out the build of revision 22563. Thanx, Jaap J P wrote: Hi, Attached is a capture file for a call made in our lab. -John

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, Then it the unistim dissector should feed the voip call tap with relevant info. I'm not sure this can be done from a plugin. You can always get the audio by means of RTP analysis. Get all streams, pick out the stream(s) of interest, save it to an .au file and play that. Sure, the voip

Re: [Wireshark-dev] When will Wireshark 0.99.7 become a stable release

2007-08-22 Thread Jaap Keuter
Hi, Whenever our Fearless Leader(sm) Gerald decides there's enough improvments/security fixes collected in the repository to be pushed out as a release he'll start the process. About Beta software; technically Wireshark still is beta software until we reach 1.0. But then again what defines a

Re: [Wireshark-dev] Build bot failing.

2007-08-22 Thread Jaap Keuter
Hi, Checked in a fix like that. Thanx, Jaap Anders Broman (AL/EAB) wrote: Hi, Currently the build bot is failing with: packet-pana.c(677) : error C2220: warning treated as error - no object file generated packet-pana.c(677) : warning C4244: '=' : conversion from 'unsigned short ' to

Re: [Wireshark-dev] [Wireshark-commits] rev 22586: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-ip.c

2007-08-22 Thread Jaap Keuter
Hi, So that is a general objection to the line-style, not so much providing additional information. Sorry, but that gets a markdown in my book. Sure, the style may be less ideal, but style consistency should take precedence. Thanx, Jaap Stig Bjørlykke wrote: Den 23. aug. 2007 kl. 00.34

Re: [Wireshark-dev] Display Filter Fields typos, missing fields, etc.

2007-08-23 Thread Jaap Keuter
Hi, As defined in README.developer: static hf_register_info hf[] = { { hf_PROTOABBREV_FIELDABBREV, { FIELDNAME, PROTOABBREV.FIELDABBREV, FIELDTYPE, FIELDBASE, FIELDCONVERT, BITMASK, FIELDDESCR,

Re: [Wireshark-dev] help me for plugin.

2007-08-23 Thread Jaap Keuter
Hi, Add its name to the DISSECTOR_SUPPORT_SRC symbol in Makefile.common. Thanx, Jaap Amit Paliwal wrote: i am writing a plugin which contains *packet-xxx.c *file and i am writing one *packet-xxx-ie.h *file which contains some relevent prototype declarations of function used and i am

Re: [Wireshark-dev] Request for Addition of UNISTIM CMD Address Text to Info Field of Decode Summary

2007-08-23 Thread Jaap Keuter
Hi John, Added your request to the TODO file in the unistim plugin directory. Thanx, Jaap J P wrote: Hi, Would it be possible to add the UNISTIM CMD text for each UNISTIM command in a packet to the Info field of the Decode Summary? For example display the following for the UNISTIM

Re: [Wireshark-dev] [Wireshark-commits] rev 22661: /trunk/ /trunk/aclocal-fallback/: libsmi.m4 /trunk/epan/: oids.c /trunk/: configure.in

2007-08-27 Thread Jaap Keuter
Hi, My build breaks on oids.c cc1: warnings being treated as errors oids.c: In function 'register_mibs': oids.c:464: warning: dereferencing type-punned pointer will break strict-aliasing rules oids.c:476: warning: dereferencing type-punned pointer will break strict-aliasing rules make[1]: ***

Re: [Wireshark-dev] [Wireshark-commits] rev 22661: /trunk/ /trunk/aclocal-fallback/: libsmi.m4 /trunk/epan/: oids.c /trunk/: configure.in

2007-08-27 Thread Jaap Keuter
; } smi_module_t; to typedef struct smi_module_t { void* dummy; char* name; } smi_module_t; Is the warning gone? Luis On 8/27/07, Jaap Keuter [EMAIL PROTECTED] wrote: Hi, My build breaks on oids.c cc1: warnings being treated as errors oids.c: In function

Re: [Wireshark-dev] [Wireshark-commits] rev 22661: /trunk/ /trunk/aclocal-fallback/: libsmi.m4 /trunk/epan/: oids.c /trunk/: configure.in

2007-08-27 Thread Jaap Keuter
if this thing flies. Thanx, Jaap On 8/27/07, Jaap Keuter [EMAIL PROTECTED] wrote: Hi, Sorry, no luck :-( Thanx, Jaap Luis EG Ontanon wrote: I got it... Optimizer is smart enough to reduce struct smi_module_t { char* name; } into char* but not insightfull enought to knwo it did it itself

Re: [Wireshark-dev] smi_modules

2007-08-28 Thread Jaap Keuter
Hi, And on Debian (lenny/sid), with packages libsmi, libsmi2-dev and libsmi2-common loaded it can't find these: COPS-PR-SPPI COPS-PR-SPPI-TC DIFFSERV-PIB FRAMEWORK-PIB There located in /ust/share/pibs but this directory is not loaded by default. I'm not sure why, but it seems a work directory

Re: [Wireshark-dev] smi_modules

2007-08-28 Thread Jaap Keuter
Hi, I was thinking about Wireshark specific tags as well, but using ~/.smirc for that is probably wrong. Which $HOME should that be? It should go in the global smi.config to have it available for everyone. Not sure I like the idea of changing the global config. Their should be another way. Just

Re: [Wireshark-dev] Problems with text2pcap on windows

2007-09-06 Thread Jaap Keuter
Hi, I'm missing the line 10 ?? ?? ?? ?? ?? ?? Thanx, Jaap Varuna De Silva wrote: Hi Michael, Thanks for the reply, heres the text file attached Xavier 00 5c 5e 18 85 1a e2 45 70 08 83 56 13 77 70

Re: [Wireshark-dev] New dissector for TPNCP protocol

2007-09-11 Thread Jaap Keuter
Hi, I've a few questions on this. First of all what's the status of this external tpncp.dat file? Under what license is it distributed? I'm not sure if I like the idea of such a 'flexible' dissector since we never can be sure of the quality of the dissector since it depends on the tpncp.dat

Re: [Wireshark-dev] How to configure compiling to optimalize debugging

2007-09-12 Thread Jaap Keuter
Hi, How about 'make tshark' ? Thanx, Jaap Lukast dev wrote: Hello, i'm trying to learn to code line-taper and dissector and i don't have much experiences with configure...but could you help me to speed up the building process of tshark? I usually edit tap-myname.c and

Re: [Wireshark-dev] [PATCH] packet-bootp patch

2007-09-13 Thread Jaap Keuter
Hi, Committed revision 22864. Thanx, Jaap Thomas Sillaber wrote: Attached is a patch for packet-bootp.c to support Alcatel-Lucent TFTP1 and TFTP2 vendor specific options. brgds TS ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org

Re: [Wireshark-dev] Extending wireshark's capture capabilities

2007-09-17 Thread Jaap Keuter
Hi, Better contact the TCPdump/libpcap mailing list (http://www.tcpdump.org/) and WinPcap (http://www.winpcap.org) mailing list and ask how to get ahead. A DLT_ value could be all you need? Thanx, Jaap Will Barker wrote: We currently produce PC-based WAN products. These include support for

Re: [Wireshark-dev] compiler warnings from glib

2007-09-19 Thread Jaap Keuter
Hi, This has already been solved upstream, see http://bugzilla.gnome.org/show_bug.cgi?id=457641 Implement the same fix locally and you'll be fine. Thanx, Jaap Richard van der Hoff wrote: Hi all, I've just upgraded my version of glib (now 2.14.0), and now I get a load of warnings like:

Re: [Wireshark-dev] about mikey dissector

2007-09-19 Thread Jaap Keuter
Hi, The buildbot is working on revision 22911, which contains this feature. Thanx, Jaap Jaap Keuter wrote: Hi, I'll clean up the dissector source somewhat and add two port mappings. They'll be on the IANA registered ports though, and I suggest you'll do the same, if possible

Re: [Wireshark-dev] merge the trace from sender and receiver

2007-09-25 Thread Jaap Keuter
Hi, mergecap is your friend here. Thanx, Jaap Ming Zhang wrote: Hi All I wonder whether wireshark has this feature. I am doing some tcp/ip analysis between 1 client and 1 server. I capture the trace from both boxes. Now wonder if wireshark or any other tool can examine both traces at

<    1   2   3   4   5   6   7   8   9   10   >