Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-11 Thread Jaap Keuter
Hi, A unistim plugin for Wireshark is in the works. It's currently at the stage of fuzztesting, which shows some problems. Once that's done it's complete and added to the repository. Thanx, Jaap J P wrote: > Hi Everyone, > > This may be off topic, but it may be useful in the development of t

Re: [Wireshark-dev] MIB parsing unnecessary

2007-08-13 Thread Jaap Keuter
Hi, There's a long standing bug on this: bug 1088. Fixing that would be most appreciated. Thanx, Jaap Luis EG Ontanon wrote: > You'll keep that feature :-) > > char* format_oid_decoded(guint8* oid, guint32 len) { > char* result; > guint32 matched; > oid_info_t* oid_info = look

Re: [Wireshark-dev] [PATCH] Status code for PMIPv6

2007-08-14 Thread Jaap Keuter
Hi, Checked in. Please note that the new way of sending patches is through bugzilla. This to make sure patches, like these, don't end up being overlooked. Thanx, Jaap Nicolas Dichtel wrote: > Hi, > > please find enclosed a patch to update BA status code for PMIPv6 > according to draft-ietf-net

[Wireshark-dev] Finding the bug in the unistim dissector

2007-08-15 Thread Jaap Keuter
Hi list, I've picked up the unistim dissector a while ago and try getting it into shape for checkin. Thing is that I'm currently running fuzztests which for the most run fine, but now I've isolated a packet that causes a segmentation fault. The problem is that I'm stuck looking for the cause.

Re: [Wireshark-dev] Finding the bug in the unistim dissector

2007-08-15 Thread Jaap Keuter
t; > Luis > > On 8/15/07, Jaap Keuter <[EMAIL PROTECTED]> wrote: >> Hi list, >> >> I've picked up the unistim dissector a while ago and try getting it into >> shape for checkin. Thing is that I'm currently running fuzztests which >> for the most

Re: [Wireshark-dev] Finding the bug in the unistim dissector

2007-08-16 Thread Jaap Keuter
after the weekend. Thanx, Jaap (*) format string escape was done by means of inserting a slash in front of a percent. That lead to a test case with "s/%nguage" format string. That "%n" causes trouble. Changing the escape character to "%" solved this. Jaap Keuter

Re: [Wireshark-dev] Adding changes to Wireshark appearance

2007-08-19 Thread Jaap Keuter
Hi, That would be image/wssplash.xpm. Thanx, Jaap On Sun, 19 Aug 2007, Michal Kelner wrote: > Hi, > > I would like to add some changes in the WS GUI, editing the icon a little bit > (adding some graphics to it), while still keeping its original look-and-feel. > I've made some changes in /image

Re: [Wireshark-dev] [PATCH] Further improvements to the MPEG decoder

2007-08-19 Thread Jaap Keuter
Hi Shaun, Looks interesting. To avoid it getting lost please consult: http://wiki.wireshark.org/Development/PatchHandling Thanx, Jaap Shaun Jackman wrote: > Please apply or provide comments. > > Thanks, > Shaun > > On 8/9/07, Shaun Jackman <[EMAIL PROTECTED]> wrote: >> This patch adds SCR, PTS

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-20 Thread Jaap Keuter
Hi, The unistim plugin was added to the repository in revision 22558. The buildbot builds are in the download section. Thanx, Jaap Jaap Keuter wrote: > Hi, > > A unistim plugin for Wireshark is in the works. It's currently at the > stage of fuzztesting, which shows some prob

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
tim patch? > > The decodes that I get from a VoIP call do not seem to inidicate Unistim > but rather a complex main port with no Unistim command decodes. > > Am I doing something wrong? > > Thanx, > > John > ** > *From*: Jaap Keuter <[EMAIL PROTECTED]

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
> 4220.....$ > > Do you know what I am doing wrong so that I am seeing only data and not > the Unistim Decode? > > Thanx, > > John > > *From*: Jaap Keuter <[EMAIL PROTECTED] > <mailto:[EMAIL PROTECTED]>> > *Date*:

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, Ahh crap. Installers, you think you've got them all. Not so :/ Thanx, Jaap Guy Harris wrote: > J P wrote: > >> I do not see a UNISTIM plug-in in the C:\Program >> Files\Wireshark\plugins\0.99.7-SVN-22562 directory or an updated >> RUDP.DLL file. >> >> Does one have to do something speci

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, I can tell you that it's decoded fine. A call to 2600 and a few seconds RTP with you blowing in the mic twice ;) Just give the buildbot a little time to spit out the build of revision 22563. Thanx, Jaap J P wrote: > Hi, > > Attached is a capture file for a call made in our lab. > > -Jo

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, Then it the unistim dissector should feed the voip call tap with relevant info. I'm not sure this can be done from a plugin. You can always get the audio by means of RTP analysis. Get all streams, pick out the stream(s) of interest, save it to an .au file and play that. Sure, the voip call

Re: [Wireshark-dev] When will Wireshark 0.99.7 become a stable release

2007-08-22 Thread Jaap Keuter
Hi, Whenever our Fearless Leader(sm) Gerald decides there's enough improvments/security fixes collected in the repository to be pushed out as a release he'll start the process. About Beta software; technically Wireshark still is beta software until we reach 1.0. But then again what defines a 1

Re: [Wireshark-dev] Build bot failing.

2007-08-22 Thread Jaap Keuter
Hi, Checked in a fix like that. Thanx, Jaap Anders Broman (AL/EAB) wrote: > Hi, > Currently the build bot is failing with: > packet-pana.c(677) : error C2220: warning treated as error - no object > file generated packet-pana.c(677) : warning C4244: '=' : conversion from > 'unsigned short ' to

Re: [Wireshark-dev] [Wireshark-commits] rev 22586: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-ip.c

2007-08-22 Thread Jaap Keuter
Hi, So that is a general objection to the line-style, not so much providing additional information. Sorry, but that gets a markdown in my book. Sure, the style may be less ideal, but style consistency should take precedence. Thanx, Jaap Stig Bjørlykke wrote: > Den 23. aug. 2007 kl. 00.34 skre

Re: [Wireshark-dev] Display Filter Fields typos, missing fields, etc.

2007-08-23 Thread Jaap Keuter
Hi, As defined in README.developer: static hf_register_info hf[] = { { &hf_PROTOABBREV_FIELDABBREV, { "FIELDNAME", "PROTOABBREV.FIELDABBREV", FIELDTYPE, FIELDBASE, FIELDCONVERT, BITMASK, "FIELDDES

Re: [Wireshark-dev] help me for plugin.

2007-08-23 Thread Jaap Keuter
Hi, Add its name to the DISSECTOR_SUPPORT_SRC symbol in Makefile.common. Thanx, Jaap Amit Paliwal wrote: > > i am writing a plugin which contains *packet-xxx.c *file and i am > writing one *packet-xxx-ie.h *file which contains some relevent > prototype declarations of function used and i am

Re: [Wireshark-dev] Request for Addition of UNISTIM CMD Address Text to Info Field of Decode Summary

2007-08-23 Thread Jaap Keuter
Hi John, Added your request to the TODO file in the unistim plugin directory. Thanx, Jaap J P wrote: > Hi, > > Would it be possible to add the UNISTIM CMD text for each UNISTIM > command in a packet to the Info field of the Decode Summary? > > For example display the following for the UNIST

Re: [Wireshark-dev] [Wireshark-commits] rev 22661: /trunk/ /trunk/aclocal-fallback/: libsmi.m4 /trunk/epan/: oids.c /trunk/: configure.in

2007-08-27 Thread Jaap Keuter
Hi, My build breaks on oids.c cc1: warnings being treated as errors oids.c: In function 'register_mibs': oids.c:464: warning: dereferencing type-punned pointer will break strict-aliasing rules oids.c:476: warning: dereferencing type-punned pointer will break strict-aliasing rules make[1]: *** [

Re: [Wireshark-dev] [Wireshark-commits] rev 22661: /trunk/ /trunk/aclocal-fallback/: libsmi.m4 /trunk/epan/: oids.c /trunk/: configure.in

2007-08-27 Thread Jaap Keuter
dule_t { > char* name; > } smi_module_t; > > to > > typedef struct smi_module_t { > void* dummy; > char* name; > } smi_module_t; > > > Is the warning gone? > > Luis > > > On 8/27/07, Jaap Keuter <[EMAIL PROTECTED]> w

Re: [Wireshark-dev] [Wireshark-commits] rev 22661: /trunk/ /trunk/aclocal-fallback/: libsmi.m4 /trunk/epan/: oids.c /trunk/: configure.in

2007-08-27 Thread Jaap Keuter
ary '&'". So I've checked in the (void *) variant. Now we'll have to see if this thing flies. Thanx, Jaap > > On 8/27/07, Jaap Keuter <[EMAIL PROTECTED]> wrote: >> Hi, >> >> Sorry, no luck :-( >> >> Thanx, >> Jaa

Re: [Wireshark-dev] smi_modules

2007-08-28 Thread Jaap Keuter
Hi, And on Debian (lenny/sid), with packages libsmi, libsmi2-dev and libsmi2-common loaded it can't find these: "COPS-PR-SPPI" "COPS-PR-SPPI-TC" "DIFFSERV-PIB" "FRAMEWORK-PIB" There located in /ust/share/pibs but this directory is not loaded by default. I'm not sure why, but it seems a work dir

Re: [Wireshark-dev] smi_modules

2007-08-28 Thread Jaap Keuter
Hi, I was thinking about Wireshark specific tags as well, but using ~/.smirc for that is probably wrong. Which $HOME should that be? It should go in the global smi.config to have it available for everyone. Not sure I like the idea of changing the global config. Their should be another way. Just no

Re: [Wireshark-dev] Problems with text2pcap on windows

2007-09-06 Thread Jaap Keuter
Hi, I'm missing the line 10 ?? ?? ?? ?? ?? ?? Thanx, Jaap Varuna De Silva wrote: > Hi Michael, > > Thanks for the reply, heres the text file attached > > Xavier > > > 00 5c 5e 18 85 1a e2 45 70 > 08 83 56 1

Re: [Wireshark-dev] New dissector for TPNCP protocol

2007-09-11 Thread Jaap Keuter
Hi, I've a few questions on this. First of all what's the status of this external tpncp.dat file? Under what license is it distributed? I'm not sure if I like the idea of such a 'flexible' dissector since we never can be sure of the quality of the dissector since it depends on the tpncp.dat fi

Re: [Wireshark-dev] How to configure compiling to optimalize debugging

2007-09-12 Thread Jaap Keuter
Hi, How about 'make tshark' ? Thanx, Jaap Lukast dev wrote: > Hello, i'm trying to learn to code line-taper and dissector and i don't > have much experiences with > configure...but could you help me to speed up the building process of > tshark? > > I usually edit tap-myname.c and /epan/dissec

Re: [Wireshark-dev] [PATCH] packet-bootp patch

2007-09-13 Thread Jaap Keuter
Hi, Committed revision 22864. Thanx, Jaap Thomas Sillaber wrote: > Attached is a patch for packet-bootp.c to support Alcatel-Lucent TFTP1 and > TFTP2 vendor specific options. > > brgds > > TS > ___ Wireshark-dev mailing list Wireshark-dev@wireshark

Re: [Wireshark-dev] Extending wireshark's capture capabilities

2007-09-17 Thread Jaap Keuter
Hi, Better contact the TCPdump/libpcap mailing list (http://www.tcpdump.org/) and WinPcap (http://www.winpcap.org) mailing list and ask how to get ahead. A DLT_ value could be all you need? Thanx, Jaap Will Barker wrote: > We currently produce PC-based WAN products. These include support for

Re: [Wireshark-dev] about mikey dissector

2007-09-18 Thread Jaap Keuter
Hi, Add this line to proto_reg_handoff_mikey() in epan/dissectors/packet-mikey.c: dissector_add("udp.port", 2269, mikey_handle); as I assume you're using the IANA registered UDP port. Thanx, Jaap Filippo Margiotta wrote: > Hi All, > I would like to use the mikey dissector in a different wa

Re: [Wireshark-dev] compiler warnings from glib

2007-09-19 Thread Jaap Keuter
Hi, This has already been solved upstream, see http://bugzilla.gnome.org/show_bug.cgi?id=457641 Implement the same fix locally and you'll be fine. Thanx, Jaap Richard van der Hoff wrote: > Hi all, > > I've just upgraded my version of glib (now 2.14.0), and now I get a load > of warnings like:

Re: [Wireshark-dev] about mikey dissector

2007-09-19 Thread Jaap Keuter
because I haven't the right. > Thanks again. > Filippo > > > > 2007/9/18, Filippo Margiotta < [EMAIL PROTECTED] > <mailto:[EMAIL PROTECTED]>>: > > Hi Jaap, > tomorrow I will test your suggestion. > > Thank you very much! > Fi

Re: [Wireshark-dev] about mikey dissector

2007-09-19 Thread Jaap Keuter
Hi, The buildbot is working on revision 22911, which contains this feature. Thanx, Jaap Jaap Keuter wrote: > Hi, > > I'll clean up the dissector source somewhat and add two port mappings. > They'll be on the IANA registered ports though, and I suggest you'll do

Re: [Wireshark-dev] Steps to port wireshark to windows xp, vista and solaris

2007-09-24 Thread Jaap Keuter
Hi, You REALLY need to read the developer guide here: http://www.wireshark.org/docs/ Read it carefully and follow ALL instructions. Thanx, Jaap [EMAIL PROTECTED] wrote: > Hi , > > We have used Linux 64 bit machine to compile and test our dissectors. > Now we want the same to be done in Windo

Re: [Wireshark-dev] merge the trace from sender and receiver

2007-09-25 Thread Jaap Keuter
Hi, mergecap is your friend here. Thanx, Jaap Ming Zhang wrote: > Hi All > > I wonder whether wireshark has this feature. > > I am doing some tcp/ip analysis between 1 client and 1 server. I capture > the trace from both boxes. Now wonder if wireshark or any other tool can > examine both trace

Re: [Wireshark-dev] MIKEY plugin

2007-10-01 Thread Jaap Keuter
Hi, as far as I know there's no way to do that. All you can do is implement the commented-out code in dissecto_payload_kemac. Thanx, Jaap Filippo Margiotta wrote: > Hi All, > I would like to write a plugin to decipher the Enrcrypted Data in the > KEMAC payload of the MIKEY dissector. > How I s

Re: [Wireshark-dev] Loooking for a libwireshark.lib 0.99.6

2007-10-04 Thread Jaap Keuter
Hi, You can't build a plugin out of tree, so you'll have no use just getting this file. Please consult the Developer Guide PDF for all information regarding development on Windows platforms. Thanx, Jaap Thierry wrote: > Hi, > > I want to build a existing company made dissecator on Windows, bu

Re: [Wireshark-dev] problem while configuring on solaris

2007-10-04 Thread Jaap Keuter
Hi, Maybe the line "I couldn't find pod2man; make sure it's installed and in your path" is a hint? And you'll need Perl for that. Thanx, Jaap [EMAIL PROTECTED] wrote: > Hello , > > I have been trying to compile wireshark 0.99.5 version on solaris 5.8 . > But while executing the ./configure

Re: [Wireshark-dev] About a faster wireshark

2007-10-07 Thread Jaap Keuter
Hi, One of the design goals of the Wireshark code base is portability. This proposal seems to revolve around platform and compiler specific hacks, contradicting this principle. So it will probably remain a seperate patch, not included in trunk. What do you propose on maintenance of this patch?

Re: [Wireshark-dev] Wishlist? (items related to VoIP graph analysis)

2007-10-07 Thread Jaap Keuter
Antoine Reid wrote: > > 1- When viewing a dump and hitting the "Statistics/VoIP Calls" menu choice: > >1a- In the window that pops up, display the filename if available > (this is useful when you have multiple instances of Wireshark running, > each displaying a different capture) Seen someth

Re: [Wireshark-dev] About a faster wireshark

2007-10-08 Thread Jaap Keuter
Didier wrote: > On Mon, 08 Oct 2007 07:20:36 +0200, Jaap Keuter wrote >> Hi, >> >> One of the design goals of the Wireshark code base is portability. >> This proposal seems to revolve around platform and compiler specific >> hacks, contradicting this princi

Re: [Wireshark-dev] How to capture original packet ?

2007-10-11 Thread Jaap Keuter
Hi, My advice: Stay away from NISTnet. It's outdated, and buggy. A far more clean and maintained solution is the netem feature of the Linux Kernel. See http://linux-net.osdl.org/index.php/Netem Thanx, Jaap Maynard, Chris wrote: > Shunra also offers some excellent products, but I recall them be

[Wireshark-dev] Notice to trunk builders

2007-10-15 Thread Jaap Keuter
Hi list, Everyone building from trunk: heads up. Someone decided to move the MGCP dissector to mainstream. That means that the plugin now conflicts with the build in dissector. Make sure to make clean in plugins/mgcp before you start complaining about a broken build. BTW: getting a dissector f

Re: [Wireshark-dev] [REPOST] rfc: adding support for direction info in bluetooth H4 capture

2007-10-16 Thread Jaap Keuter
Hi Paolo, Please understand that we're all a bit pressed for time. At least I know I am. Taking a peek at the code reveals no obvious error to me, but I'm not really familiar with the wiretap interface. So if someone who is familiar with the wiretap interface has some spare time he'll pick it u

Re: [Wireshark-dev] [Wireshark-bugs] [Bug 1430] EtherCAT dissector

2007-10-16 Thread Jaap Keuter
Hi Ulf, We've looked into this a while ago and it seemed that the WS_VAR_IMPORT stuff didn't work on data items shared between DLL's. If there's some new insight, please someone make it work. I've no Win32 platform to develop this on, and have no idea how to handle this tricky situation. Thanx

Re: [Wireshark-dev] [patch] Updates for the packet-wlancap dissector

2007-10-18 Thread Jaap Keuter
HI, Thank you for creating this patch. Better attach it to a bugzilla report, so it won't get lost. See http://wiki.wireshark.org/Development/PatchHandling for the current procedure. Thanx, Jaap Solomon Peachy wrote: > Howdy, folks! > > The attached patch (against r23226) does three things:

Re: [Wireshark-dev] Bug (ID:1856) status

2007-10-19 Thread Jaap Keuter
Hi, Well, you've missed the boat in two ways: 1. Current build is on 0.99.7, not 0.99.5 as you've used. 2. MGCP dissector moved from plugin to build-in dissector. Also not closing the bug report helps to get a response. Thanx, Jaap Harmeet Sawhney wrote: > Hi, > I have created a bug (ID: 1856)

Re: [Wireshark-dev] Infinite loop in packet-gdsdb.c

2007-10-22 Thread Jaap Keuter
Hi, Good catch, both of them. Fixed in revision 23251. Thanx, Jaap packet steve wrote: > > > > Potential infinite loop at line 608 of packet-gdsdb.c > > while(tvb_bytes_exist(tvb, 0, 12)) { > proto_tree_add_item(tree, hf_gdsdb_receive_direction, tvb, offset, 4, > FALSE); > offset += 4;

Re: [Wireshark-dev] Protocol Parser Compiler

2007-10-23 Thread Jaap Keuter
Andrew Feren wrote: > I do, however, have one question before I head too far down this path. How > do people feel about introducing C++ to Wireshark? I ask because binpac > currently generates C++ code. This would open up a new can-o-worms of compiler / memory management / compatibility problem

Re: [Wireshark-dev] wireshark (0.99.6) on openbsd 4.1 i386

2007-10-26 Thread Jaap Keuter
Hi, You're welcome :) Thanx, Jaap kamisori kun wrote: > Dear Wireshark Team, > it works perfectly! > im so happy ... ^_^ > Thanks guys > > best regards > kamisori ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mai

Re: [Wireshark-dev] [Patch] packet-isakmp.c

2007-10-28 Thread Jaap Keuter
Hi, Checked in, a little different. Stuffed within #ifdef HAVE_LIBNETTLE Thanx, Jaap Gisle Vanem wrote: > must be included because of eth_fopen(): > > --- SVN-Latest\epan\dissectors\packet-isakmp.c Tue Oct 23 14:29:00 2007 > +++ epan\dissectors\packet-isakmp.c Thu Oct 25 14:21:56 2007 > @

Re: [Wireshark-dev] Global configuration files are overwritten by Debian package

2007-11-14 Thread Jaap Keuter
Hi, I think these questions are better asked to the Debian package maintainer, Frederic Peters ([EMAIL PROTECTED]). Thanx, Jaap Martin André wrote: > Hello, > > I'm wondering if it is currently possible to keep global configuration > file set for the whole system, for example custom system-wid

Re: [Wireshark-dev] what are the steps needed to add a plugin

2007-11-14 Thread Jaap Keuter
Hi, See it as a tradeoff. Option 1 is to add your dissector build in. This means that you'll have to rebuild register.c and relink libwireshark every time you change your dissector. With a ton of dissectors this takes a while. Option 2 is to add your dissector as a plugin. This takes some work

Re: [Wireshark-dev] displaying tree values > 32 bits

2007-11-14 Thread Jaap Keuter
Hi, The largest integer we handle at this moment is 64 bit. Thanx, Jaap Kevin Arruda wrote: > Hello, > > I was having some trouble finding the answer to this: > > I would like to add an entry to my dissection table which handles a 128 > bit value. For values > 32 bits, must I forego the tabl

Re: [Wireshark-dev] The COPYING file (our license) is a mess!

2007-11-14 Thread Jaap Keuter
Hi, Looking at the history the main part was added by Gerald in revision 21806. Yes, it should be clear to anyone what the GPLv2 means but in real life you get some *stupid* questions on it. (I'm all for the view that there are no stupid questions, only stupid answers, but here I make the exce

Re: [Wireshark-dev] Bitfield handling in proto_tree_add_uint_format()

2007-11-19 Thread Jaap Keuter
Hi, From a code point of view (epan/proto.c) I can see why this is happening. From a API point of view this looks wrong. If I'm serving the function the value to work with I expect it to work with that value, not its own interpretation of it. Let's have a look at what happens if we change this

Re: [Wireshark-dev] proto_filter_names hash collision

2007-11-20 Thread Jaap Keuter
Guy Harris wrote: > Kukosa, Tomas wrote: >> It seems that we have reached critical number of protocols. >> I have met collision of built in "p7" protoco with my private "nu" >> protocol. They both have the same g_str_hash() value. >> >> Does it make sence to create hash from the protocol filter

Re: [Wireshark-dev] proto_filter_names hash collision

2007-11-21 Thread Jaap Keuter
Hi, Sounds good to me. Thanx, Jaap Kukosa, Tomas wrote: >>> Does it make sense to do all those sanity checks only if a special >>> command-line flag is supplied to TShark, so that the checks >> are done as >>> part of the build process, rather than being done every >> time you run >>> Wires

Re: [Wireshark-dev] Startup speed up - remove dissectors?!

2007-11-21 Thread Jaap Keuter
Hi, There are two roadblocks in this reasoning, which come to light on the Win32 platform specifically: 1. Not all used functions are exported, so the dynamic linking won't work with the current code. 2. Exporting data items from one DLL and using them in another won't work. This will require d

Re: [Wireshark-dev] 0.99.7pre1: missing preferences for fcoe and samr

2007-11-22 Thread Jaap Keuter
Hi, This results from the blunt removal of preference settings from a dissector. If one follows the developer guidelines you should know that these need to be replaced with prefs_register_protocol_obsolete(). So those who checked in the changes dropping preferences, please fix them and add the

Re: [Wireshark-dev] Postpone the Wireshark 0.99.7 release?

2007-11-27 Thread Jaap Keuter
Hi, Sounds like a good plan. What do you think about the situation of SNMP? Thanx, Jaap Gerald Combs wrote: > Due to the amount of bug reports and fixes that have come in since 0.99.7pre1 > was announced, I'd like to release 0.99.7pre2 tomorrow and postpone the final > release until December 5th

Re: [Wireshark-dev] A Multicast RTP Question

2007-11-27 Thread Jaap Keuter
Hi Jack, I think you're confused about how multicast works. Let's start with some definitions. You talk about endpoints. That is a good abstraction. Let's define interface as a network interface on the endpoint, something you plug the network cable into. This interface has an IP address, like

Re: [Wireshark-dev] Dynamically allocated field array

2007-11-28 Thread Jaap Keuter
Hi, Yeah, and I though we're using glib functions for memory management. All this realloc and memcpy look ugly. Thanx, Jaap Kukosa, Tomas wrote: > The packet-tpncp.c has dynamically allocated fields array and register > them one by one: > > /* > * The function proto_register_field_a

Re: [Wireshark-dev] RPC RQUOTA protocol

2007-11-28 Thread Jaap Keuter
Hi, What's wrong with the RPC.RQUOTAD man page? It refers to /usr/include/rpcsvc/rquota.x which defines the protocol. Thanx, Jaap [EMAIL PROTECTED] wrote: > All, > > I'm having difficulty finding information that discusses either the RQUOTA V1 > or V2 protocol. Was there ever an RFC or somet

Re: [Wireshark-dev] Filtering using DHCP and SSDP throws error

2007-11-29 Thread Jaap Keuter
Hi, DHCP isn't a protocol. It's an extension to BOOTP, so simply replace dhcp by bootp and all is well. Thanx, Jaap > Hi , > > On the wireshark GUI I have tried to filter using the keywords dhcp and > ssdp for the DHCP and SSDP protocol but the wireshark throws an error > message stating "dhcp"

Re: [Wireshark-dev] How to playback the AMR in RTP packet

2007-11-30 Thread Jaap Keuter
Hi, Isn't this a problem for every audio stream. The RTP player has a configurable jitter buffer, but the actual endpoint usually has a dynamic one. Also packet loss concealment can improve the perception at the endpoint considerably. So the RTP player is nice, but isn't really relevant for the

Re: [Wireshark-dev] DASS / DPNSS

2007-12-06 Thread Jaap Keuter
> Hi, > > I was wondering if DASS / DPNSS dissectors exist. > Any pointers would be appreciated. > > Regards > Amit > Well is this your lucky day! Check out the release notes for the upcoming 0.99.7. It says: New Protocol Support ANSI TCAP, application/xcap-error (MIME type), CFM, DPNSS, . So

Re: [Wireshark-dev] error with packet.h

2007-12-07 Thread Jaap Keuter
Hi, You will have to tell us what version of the sourcecode you are using before we can find what this output references. Thanx, Jaap > > Hello , > > I tried including a file packet-test.c in the wireshark/plugin/test > directory to understand the inclusion of dissection for a test protocol. > B

Re: [Wireshark-dev] error with packet.h

2007-12-07 Thread Jaap Keuter
Hi, Your build has problems with WS_VAR_IMPORT. Did you setup the build environment correctly using autogen.sh and configure? What type/version of *NIX are you using? Thanx, Jaap ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.

Re: [Wireshark-dev] new packet-usb-audio dissector?

2007-12-09 Thread Jaap Keuter
Hi, There is little difference in having your dissector in either a plugin or build-in. On the Win32 platform you have limited function access through what's listed in libwireshark.def, but that is mostly complete. The big plus is that your rebuild cycle for a plugin is much shorter than for a

Re: [Wireshark-dev] new packet-usb-audio dissector?

2007-12-09 Thread Jaap Keuter
Hi, Done. Thanx, Jaap Ulf Lamping wrote: > Jaap Keuter schrieb: >> Hi, >> >> There is little difference in having your dissector in either a plugin >> or build-in. On the Win32 platform you have limited function access >> through what's listed in libwire

Re: [Wireshark-dev] Install Problem with config log

2007-12-10 Thread Jaap Keuter
Hi, You're a brave man, trying to compile Wireshark on a IXP425 board. But this line in config.log is a dead giveaway: configure:3058: error: no acceptable C compiler found in $PATH There's no compiler on your board. Thanx, Jaap Wong Kwan Tat-DCRM36 wrote: > Dear Team > > I'm a native Linux u

Re: [Wireshark-dev] crash with Preference in Plugin

2007-12-14 Thread Jaap Keuter
Hi, If you could post at least your proto_register and proto_handoff code we might be able to get some insight. Thanx, Jaap khushbu thakkar wrote: > Hello, > > I am not actually new to Wireshark, i have build the plugin in > Wireshark which has to be decoded on the top of UDP. I m u

Re: [Wireshark-dev] [Wireshark-commits] rev 23873: /trunk/gtk/ /trunk/gtk/: menu.c proto_dlg.c proto_dlg.h

2007-12-16 Thread Jaap Keuter
Hi, I tried to avoid walking the tree, but failed to spot this issue. Let's see how to treewalk then. Thanx, Jaap Guy Harris wrote: > Stig Bjørlykke wrote: > >> The hfinfo->strings contains a protocol_t when handling a FT_PROTOCOL, >> but hfinfo->parent can be -1 in other cases. I suppose a

Re: [Wireshark-dev] crash with Preference in Plugin

2007-12-16 Thread Jaap Keuter
> Reply Soon, > Thank You, > Khushbu > > On 12/15/07, *Jaap Keuter* <[EMAIL PROTECTED] > <mailto:[EMAIL PROTECTED]>> wrote: > > Hi, > > If you could post at least your proto_register and proto_handoff code we > might be able to get some ins

Re: [Wireshark-dev] [Wireshark-commits] rev 23873: /trunk/gtk/ /trunk/gtk/: menu.c proto_dlg.c proto_dlg.h

2007-12-17 Thread Jaap Keuter
Hi list, Maybe someone can give me a pointer where to look since I can't really find a way to get at and traverse this path. Thanx, Jaap Jaap Keuter wrote: > Hi, > > I tried to avoid walking the tree, but failed to spot this issue. Let's > see how to treewalk th

Re: [Wireshark-dev] New Dissector: LLRP

2007-12-17 Thread Jaap Keuter
Hi, Patience my friend, patience. With over 250 bug reports and 75 patches pending it will take some time before anyone gets to it. Especially since your dissector is not small and very atypical, someone has to a liking to it and invest the time to verify it. That will take some time. Thanx, J

Re: [Wireshark-dev] Problemems with proto_tree_new_item after update

2007-12-19 Thread Jaap Keuter
Hi, Did you recompile your plugin for 0.99.7? I guess not. From the Wiki: Plugins are not portable between versions. Ever wondered why Wireshark keeps its plugins in a directory named after its version? That is because the plugin interface is considered an internal interface to Wireshark. The

Re: [Wireshark-dev] Problemems with proto_tree_new_item after update

2007-12-20 Thread Jaap Keuter
gs may need redesign for more flexibility. Thanx, Jaap > -- > Bryant Eastham [EMAIL PROTECTED] > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Jaap Keuter > Sent: Wednesday, December 19, 2007 12:33 PM > To: [EMAIL

Re: [Wireshark-dev] Question on expert info

2007-12-21 Thread Jaap Keuter
Hi, Like col_str_add(), generating expert info must not be dependent of tree. It should be considered a bug if it is. But because coloring is usually switched on, tree is always set and the issue is not detected. Thanx, Jaap Abhik Sarkar wrote: > Hello All, > > According to the wiki on adding

Re: [Wireshark-dev] Question on expert info

2007-12-22 Thread Jaap Keuter
Hi, Never mind. Write them up in a bug report so we don't have to go hunt for them, while you already know a couple. Thanx, Jaap Abhik Sarkar wrote: > Thanks for the confirmation Steve. I will keep it in mind. > > PS: In retrospect, my last statement might have sounded a bit > accusatory, but

Re: [Wireshark-dev] packet-pce.c causing compile errors on Windows...

2007-12-24 Thread Jaap Keuter
Hi, Just a job to fit in while preparing a meal. ;) Done in revision 23943. Thanx, Jaap Abhik Sarkar wrote: > Hello All, > > Firstly, Season's greetings to all... > > I doubt anyone is going to read this in the next couple of days, but > in case some is stuck monitoring systems like I am ;-) a

Re: [Wireshark-dev] packet-pce.c causing compile errors on Windows...

2007-12-24 Thread Jaap Keuter
Hi, Err, it is rev 23946. Het was heerlijk ;) Jaap Abhik Sarkar wrote: > Hi Jaap, > > Hmmm... I am sure I updated to 23945 _before_ I reported this... > perhaps I need to do a dist-clean. > > Anyway, thanks and Eet Smakelijk! > > Abhik. > > On Dec 24, 200

Re: [Wireshark-dev] Toolbar icons

2007-12-27 Thread Jaap Keuter
Hi, Some application specific icons come with the Wireshark sources (in image/), while others are taken from GTK stock. It is these stock items that are missing. The libraries you list are the run time libraries. Aren't there corresponding development libraries for Mac OS X that need to be inst

Re: [Wireshark-dev] Lua dll is outdated in windows binaries

2007-12-27 Thread Jaap Keuter
Hi, You better file bug reports at bugs.wireshark.org for the LUA issues you report. That way they get noticed/handled/solved by the right people. Thanx, Jaap Balint Reczey wrote: > Hi, > > The attached patch makes TCP reassembly usable from Lua dissectors. > Could someone commit it? > > Rega

Re: [Wireshark-dev] Linux Dissector Example

2007-12-28 Thread Jaap Keuter
Hi, I must direct you to doc/README.developer and doc/README.plugins for more information on that. Thanx, Jaap warlord wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: RIPEMD160 > > Hi everyone > > I do realize this probably is one of the more basic questions, but still > it doesn't seem t

Re: [Wireshark-dev] Linux Dissector Example

2007-12-28 Thread Jaap Keuter
n error. A little example that actually > worked would help me and potentially others way more than guide that > doesn't. > > Thanx, > > wrl > > > Jaap Keuter wrote: >> Hi, >> >> I must direct you to doc/README.developer and doc/README.plugins f

Re: [Wireshark-dev] crash with Preference in Plugin

2008-01-02 Thread Jaap Keuter
de > some part within my plugin packet. So how can that file > path/location can be read. At present i m setting an enviornment > variable and reading it but i m searching if some setting could be > given in Wireshark itself to read the file path/location. >

Re: [Wireshark-dev] ENC: Wireshark-dev: Re: RTCP frame length error indication in RTCP with a Bye chunk

2008-01-08 Thread Jaap Keuter
Hi, That string isn't NULL terminated, but the code expects it to be. See packet-rtcp.c:dissect_rtcp_bye(). It even counts that NULL byte, which doesn't exist. Then the BYE message is expected to be padded out to fit word size. Counting the non existing NULL byte makes it pad 3 more bytes to it

Re: [Wireshark-dev] Can not save the trace file

2008-01-12 Thread Jaap Keuter
Hi, How are you trying to open the file on your desktop? I is probably a matter of permissions. The file is created with owner root:root, which you desktop session probably isn't. They way to get around this is to change to file ownership, ie `sudo chown : '. Thanx, Jaap prashanth joshi wrot

Re: [Wireshark-dev] Request for review: bug #2048

2008-01-13 Thread Jaap Keuter
Hi Alexey, Indeed you've made an enhancement to the IPMI dissector. But also to the type system, creating BASE_CUSTOM. All in all it's an invasive patch which has to be considered carefully before inclusion. There's some more interesting stuff waiting in the patch queue, so they won't get lost;

Re: [Wireshark-dev] [Wireshark-commits] rev 24074: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-cdp.c

2008-01-13 Thread Jaap Keuter
Hi, Comments inline. Joerg Mayer wrote: > On Sun, Jan 13, 2008 at 11:56:44AM +, [EMAIL PROTECTED] wrote: >> http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=24074 >> >> User: jake >> Date: 2008/01/13 11:56 AM >> >> Log: >> From Michael Earnhart: >> Patch to add cdp Power_req

Re: [Wireshark-dev] insert plug-in MPEG-2 TS Dissector ULENET into wireshark

2008-01-13 Thread Jaap Keuter
Hi, In the doc folder of the source tree you can find the file README.plugins that explains the process of adding a plugin to the source tree. Thanx, Jaap Georgy Kitov wrote: > In 2004 has been released ethereal 0.10.8, and in the same time > ethereal-ule 0.10.8. > Now I need insert plug-in M

[Wireshark-dev] What should proto_tree_add_debug_text() do?

2008-01-15 Thread Jaap Keuter
Hi list, Your opinion please: What should proto_tree_add_debug_text() do? Should it print the string to STDOUT regardless of the value of tree or not? Currently it checks for (tree != NULL) before it prints anything. That could be what you want until you want to know what's going on when tree

[Wireshark-dev] Use of plugins/Makefile.nmake

2008-01-15 Thread Jaap Keuter
Hi List, Why isn't plugins/Makefile.nmake used for installation of the plugins into the source tree run environment? Now the dll's must be added at two places i.s.o. one (which failed to happen in the 0.99.7 release tarball). Either this or an addition to the README.plugins is required to add a

[Wireshark-dev] Should MIBS configuration go to 'Name resolution' preference?

2008-01-16 Thread Jaap Keuter
Hi list, It is odd to have a fake protocol MIBS to set the path and selection of MIBs for libsmi to use in SNMP name resolution. What about moving this to the name resolution preference page? Thanx, Jaap ___ Wireshark-dev mailing list Wireshark-dev@wi

Re: [Wireshark-dev] Win build bot failure

2008-01-18 Thread Jaap Keuter
Hi, And so they were. Thanks Stig. Jaap Anders Broman wrote: > Hi, > I think that > smi_modules_uat > smi_paths_uat > needs to be added to libwireshark.defs in epan for the buildbot to be > happy... > Regards > Anders > ___ Wireshark-dev mailing lis

Re: [Wireshark-dev] Registered Protocols?

2008-01-18 Thread Jaap Keuter
Hi, This has nothing to do with dissectors. These are TCP port numbers resolved to the corresponding service names, found in the services file. Thanx, Jaap [EMAIL PROTECTED] wrote: > With the 99.7 release of Wireshark at least two of our internal > disectors have been disabled (for lack of bet

[Wireshark-dev] Windows buildbot

2008-01-19 Thread Jaap Keuter
Hi Gerald, Could you give the Windows Buildbot a kick, it's failing the SVN checkout of the build. Thanx, Jaap ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

<    1   2   3   4   5   6   7   8   9   10   >