[Wireshark-dev] How should plugins handle coloring

2011-02-21 Thread Roland Knall
Hello I am currently writing a dissector plugin for a machine-safety protocol. The dissector is finished and currently I am in the, let's call it, beautifying stage. Problem is, the dissector can work across quite a few other dissectors. e.g.: normally data would arrive using a realtime

[Wireshark-dev] Splitting one packet into multiple packets

2011-02-24 Thread Roland Knall
Hello I have the following situation. The trace identifies (correctly) packets I am interested in. These packets come from a device, which collects packets, puts them together into one udp frame, and sends them over the network. Right now I trace the udp payload, and call the packet dissector for

Re: [Wireshark-dev] Splitting one packet into multiple packets

2011-02-24 Thread Roland Knall
processing step that relies on this? wireshark is a protocol analyzer and as such its all about 'frame in frame in frame'. David Am 24.02.2011 09:31, schrieb Roland Knall: Hello I have the following situation. The trace identifies (correctly) packets I am interested in. These packets come from

Re: [Wireshark-dev] Splitting one packet into multiple packets

2011-02-25 Thread Roland Knall
Hi ... so the split then would mainly be for the user, so he can easily filter for a particular sub stream, i.e. module ? Yes, that would be the main motivation. I don't know how to create new 'root' objects. If there's some relation between the different frames for the same module, maybe

[Wireshark-dev] Different wireshark behaviour on Linux as on Windows

2011-02-28 Thread Roland Knall
Hello I am developing a plugin, which will dissect protocols, where other dissectors are already registered. Two instances are the Ethernet Powerlink dissector as well as the Sercos III dissector. My protocol is part of their communication messages, but can not be identified as easily, as e.g.

Re: [Wireshark-dev] Different wireshark behaviour on Linux as on Windows

2011-02-28 Thread Roland Knall
On Mon, Feb 28, 2011 at 9:51 AM, Guy Harris g...@alum.mit.edu wrote: On Feb 28, 2011, at 12:32 AM, Roland Knall wrote: On Windows, the SercosIII plugin takes precedence over my plugin. Both register the same Ethertypes, therefore this should not be unusual, If you mean it's not unusual

Re: [Wireshark-dev] Different wireshark behaviour on Linux as on Windows

2011-02-28 Thread Roland Knall
Hi On Mon, Feb 28, 2011 at 9:55 AM, Roland Knall rkn...@gmail.com wrote: On Mon, Feb 28, 2011 at 9:51 AM, Guy Harris g...@alum.mit.edu wrote: So my question is, can I influence the decision made by wireshark in any way, which plugin get's called? Try disabling the dissector for the protocol

Re: [Wireshark-dev] Different wireshark behaviour on Linux as on Windows

2011-03-08 Thread Roland Knall
On Tue, Mar 8, 2011 at 4:41 AM, Chris Maynard chris.mayn...@gtech.com wrote: Roland Knall rknall@... writes: Ok, now I have a question. Both dissectors register on a certain Ethernet Frame Type (0x88CD). If I disable the SercosIII dissector, in theory, my dissector should get called, right

Re: [Wireshark-dev] Different wireshark behaviour on Linux as on Windows

2011-03-09 Thread Roland Knall
On Wed, Mar 9, 2011 at 4:14 PM, Chris Maynard chris.mayn...@gtech.com wrote: Roland Knall rknall@... writes: On Linux, when the gtk-based filehandler loads the list of plugins, it does so alphabetically. This does not seem to be the case on Windows. So here, someone might argue

Re: [Wireshark-dev] Different wireshark behaviour on Linux as on Windows

2011-03-09 Thread Roland Knall
On Wed, Mar 9, 2011 at 7:04 PM, Guy Harris g...@alum.mit.edu wrote: On Mar 9, 2011, at 7:39 AM, Roland Knall wrote: It would definitly not solve the underlying problem. but at least it would make the whole process predictable, which is definitly not the case now. That might or might

Re: [Wireshark-dev] Different wireshark behaviour on Linux as on Windows

2011-03-14 Thread Roland Knall
, what the dissector has to achieve. kind regards, Roland Knall ___ Sent via:Wireshark-dev mailing list wireshark-dev@wireshark.org Archives:http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org

[Wireshark-dev] New openSAFETY dissector

2011-03-14 Thread Roland Knall
Hello openSAFETY is a machine safety standard, which has been certified by TUEV Rheinland as well as other organizations for SIL 3 , and is currently implemented in a wide range of products. This plugin allows dissection of the openSAFETY protocol using the Industrial Ethernet Network standards

Re: [Wireshark-dev] Multiple messages in one UDP packet

2011-03-18 Thread Roland Knall
Hello In my dissector, which will hopefully be added to the main repository, I repeatedly call the dissect function to achieve exactly that functionality. Basically you have a two step situation. You write a main dissect_PROTO routine, which will be called by the UDP dissector to dissect the

Re: [Wireshark-dev] New openSAFETY dissector

2011-03-18 Thread Roland Knall
Hello Could someone please tell me, if sending a new dissector in as bug, is the accepted method of adding a new dissector? If not, please tell me, how I can resubmit the patch. kind regards, Roland On Mon, Mar 14, 2011 at 5:35 PM, Roland Knall rkn...@gmail.com wrote: Hello openSAFETY

Re: [Wireshark-dev] New openSAFETY dissector

2011-03-18 Thread Roland Knall
Thank you, knew I was missing something regards, Roland 2011/3/18 Stig Bjørlykke s...@bjorlykke.org: On Fri, Mar 18, 2011 at 2:34 PM, Roland Knall rkn...@gmail.com wrote: Could someone please tell me, if sending a new dissector in as bug, is the accepted method of adding a new dissector

Re: [Wireshark-dev] Wireshark SVN does not build on Ubuntu 64bit (gtk/expert_dlg.c)

2011-03-22 Thread Roland Knall
-Original Message- From: wireshark-dev-boun...@wireshark.org [mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Roland Knall Sent: den 22 mars 2011 15:51 To: Developer support list for Wireshark Subject: [Wireshark-dev] Wireshark SVN does not build on Ubuntu 64bit (gtk/expert_dlg.c

Re: [Wireshark-dev] Wireshark SVN does not build on Ubuntu 64bit (gtk/expert_dlg.c)

2011-03-22 Thread Roland Knall
On Tue, Mar 22, 2011 at 5:13 PM, Guy Harris g...@alum.mit.edu wrote: On Mar 22, 2011, at 7:50 AM, Roland Knall wrote: On my system, Wireshark does not build anymore since revision 36235. The reason for this is the move of the struct expert_tapdata_s from gtk/expert_dlg.h to gtk

Re: [Wireshark-dev] New openSAFETY dissector

2011-03-24 Thread Roland Knall
Hello The dissectory has now been fuzz-tested as well, with nearly 250 MB worth of various capture files. It passed. The updated version of the patch is online. kind regards, Roland ___ Sent via:Wireshark-dev mailing

[Wireshark-dev] Modbus/TCP hookup for subdissector

2011-03-25 Thread Roland Knall
Hello As I need it for daily work, I have integrated subdissector code into the Modbus/TCP dissector. Find the patch for this attached to https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5786 But here I have a question. All the information I need for the subdissector is the actual payload

Re: [Wireshark-dev] Modbus/TCP hookup for subdissector

2011-03-25 Thread Roland Knall
Am 25.03.2011 um 17:06 schrieb Chris Maynard chris.mayn...@gtech.com: Roland Knall rknall@... writes: 1. Is there a way to provide additional information to the subdissector? Someone could use private_data, but that field I need somewhere else, therefore can not be used here. I haven't

Re: [Wireshark-dev] Modbus/TCP hookup for subdissector

2011-04-01 Thread Roland Knall
-boun...@wireshark.org] On Behalf Of Roland Knall Sent: den 25 mars 2011 17:10 To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Modbus/TCP hookup for subdissector Am 25.03.2011 um 17:06 schrieb Chris Maynard chris.mayn...@gtech.com: Roland Knall rknall@... writes: 1

Re: [Wireshark-dev] New openSAFETY dissector

2011-04-01 Thread Roland Knall
Guy, could you give me a short update, if the new version of the patch is meeting your expectations, or if there are any parts of it, where I could further improve the patch? kind regards, Roland On Thu, Mar 24, 2011 at 8:01 AM, Roland Knall rkn...@gmail.com wrote: Hello The dissectory has

Re: [Wireshark-dev] Short question for modus operandi

2011-04-13 Thread Roland Knall
Hi On Wed, Apr 13, 2011 at 5:40 PM, Chris Maynard chris.mayn...@gtech.com wrote: Roland Knall rknall@... writes: I have provided some time ago a patch for submission into wireshark (Bug #5753). Over the course of the next two weeks a new version of this patch would be completed, which would

Re: [Wireshark-dev] Wireshark's source question: list devices and their MAC Addresses

2011-04-20 Thread Roland Knall
Hi This would be more suited for Google, but for example: Linux: http://stackoverflow.com/questions/4937529/polling-interface-names-via-siocgifconf-in-linux Windows: http://stackoverflow.com/questions/1070351/getadaptersinfo-and-getadaptersaddressess-bufferlength-param regards, Roland On Wed,

[Wireshark-dev] Adding new protocol to Wireshark SVN

2011-05-19 Thread Roland Knall
Hi Some time ago, I have proposed and provided patches for the support of a new safety protocol called openSAFETY. I've noticed today, that the rc version of 1.6.0 has been locked, so I was wondering, what the chances are, getting this dissector into the new SVN tree. The bug-entry for the

Re: [Wireshark-dev] New openSAFETY dissector

2011-05-31 Thread Roland Knall
Hello On Wed, Jun 1, 2011 at 5:27 AM, Guy Harris g...@alum.mit.edu wrote: However, if this is the cause of         http://buildbot.wireshark.org/trunk/builders/Ubuntu-10.04-x64/builds/1452/steps/fuzz-menagerie/logs/stdio then that raises the question why isn't the SERCOS III plugin being

Re: [Wireshark-dev] New openSAFETY dissector

2011-06-01 Thread Roland Knall
A patch for fixing this issue has been submitted via bugzilla: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5977 kind regards, Roland On Wed, Jun 1, 2011 at 7:51 AM, Roland Knall rkn...@gmail.com wrote: Hello On Wed, Jun 1, 2011 at 5:27 AM, Guy Harris g...@alum.mit.edu wrote

[Wireshark-dev] Adding broadcast messages to a conversation

2011-06-06 Thread Roland Knall
Hello I am currently trying to add conversations to the openSAFETY dissector, and I am running into some behavioural issues. A normal openSAFETY network consists of a Master Node and many Slave Nodes. The relationship of their conversational pattern depends on the state each node is currently

[Wireshark-dev] Starting Wireshark SVN Version - warning about plugin

2011-06-08 Thread Roland Knall
Hi When I start the latest wireshark (#37614), I get the warning The plugin libwiretap.so has no version symbol Same for libwsutil.so and libwireshark.so Anyone got an idea, what causes the issue? Sitting here on a Ubuntu 11.04 64-bit machine. kind regards, Roland

Re: [Wireshark-dev] build issue on new ubuntu machine prefs_dlg.c: In function ?pref_check?

2011-06-08 Thread Roland Knall
Hi Works like a charm on my PC, which is a Ubuntu 11.04 - 64bit. But only without -werror. Interestingly enough, my build fails when building iax2_analysis.c also with unused_result warning. Btw, I would recommend the cmake interface, which I normally use. But I tested using your steps, and they

Re: [Wireshark-dev] wireshark svn build is broken due to : warnings being treated as errors

2011-06-10 Thread Roland Knall
Hi Is on purpose. Remove -werror (search the wiki or devlist) to compile. kind regards, Roland 2011/6/10 Toralf Förster toralf.foers...@gmx.de: Happens since few days now : ... cc1: warnings being treated as errors iax2_analysis.c: In function ‘iax2_packet_save_payload’:

Re: [Wireshark-dev] plugins to builtins

2011-06-19 Thread Roland Knall
Hi Personally, I would prefer changing more or all plugins into built-in dissectors. It would help those dissectors, who have to use functionality only provided by a plug-in, as the whole openSAFETY-SercosIII mix-up showed. My next favorite would be the ProfiNet plug-in. If no one else would like

Re: [Wireshark-dev] plugins to builtins

2011-06-20 Thread Roland Knall
(usually single source file) into the build in set, while keeping the complicated, more messy stuff isolated in their own little space called plugin. Thanks, Jaap [1] http://anonsvn.wireshark.org/viewvc?view=revisionrevision=1341 On 06/20/2011 07:36 AM, Roland Knall wrote: Hi Personally

Re: [Wireshark-dev] plugins to builtins

2011-06-20 Thread Roland Knall
Hi There is nothing technically wrong with dissectors being developed as plugins. There might be some technical questions that arise from that fact, if another dissector is using them, but for now, those issues seemed to be dealt with correctly (for reference see the whole openSAFETY vs.

Re: [Wireshark-dev] plugins to builtins

2011-06-21 Thread Roland Knall
Hi On Tue, Jun 21, 2011 at 1:55 AM, Ulf Lamping ulf.lamp...@googlemail.com wrote: Am 21.06.2011 00:27, schrieb Roland Knall: There is nothing technically wrong with dissectors being developed as plugins. There might be some technical questions that arise from that fact, if another dissector

[Wireshark-dev] Profinet: remaining register_dissector_filter

2011-06-21 Thread Roland Knall
Hi Just wandering around code, and came across the function register_dissector_filter The Profinet plugin is the only code, where this function is apparently in use, but I can not see any immediate use for it? Can it be safely removed, or is the plugin dependant on it? kind regards, Roland

Re: [Wireshark-dev] Procedure to compile wireshark dissector on linux

2011-07-11 Thread Roland Knall
Hi Way easier method: Checkout the SVN version, or any source download into one dir called src. Create a same directory called build on the same level, so that your directory looks like that: wireshark - src - all src's - build then goto build, and call cmake ../src cmake is a software

Re: [Wireshark-dev] stable release 1.6.1 is core dumped on Fedora 13, 15

2011-08-04 Thread Roland Knall
There should be a file called core in the directory you called Wireshark from. Please send this file. Regards Roland Am 04.08.2011 um 18:25 schrieb Ngo Hoang Thang ngohoangth...@gmail.com: Hi bros, After building release 1.6.1 successful, I run ./wireshark (not install) And it presents:

Re: [Wireshark-dev] stable release 1.6.1 is core dumped on Fedora 13, 15

2011-08-04 Thread Roland Knall
An exception in packet.c can be nearly anything. The backtrace is what I am looking for, as it would tell which dissector caused the underlying issue. Roland Am 04.08.2011 um 21:23 schrieb Guy Harris g...@alum.mit.edu: On Aug 4, 2011, at 10:47 AM, Roland Knall wrote: There should

Re: [Wireshark-dev] Built-in dissector depends on a plugin dissector in 1.6.x

2011-09-07 Thread Roland Knall
Hi The problem could be solved, by explicitly checking, if the plugin exists, but I would prefer adding the solution already added to the trunk, meaning, moving the sercosiii plugin to a built-in dissector. otherwise, if preferred, i could provide a small patch to fix the problem temporarily.

Re: [Wireshark-dev] OpenSafety bug - how to fix?

2011-09-20 Thread Roland Knall
The fix is correct. Are there any other Coverty hits for openSafety, or just the one? Regards, Roland Am 20.09.2011 um 15:53 schrieb Chris Maynard chris.mayn...@gtech.com: Coverity reports the following in CID 1204 against the OpenSafety dissector: 1466firstByte = (

Re: [Wireshark-dev] catching [Malformed Packet]

2011-09-24 Thread Roland Knall
On a similar topic, how can you mark a package as malformed? Especially generated packages often fail the openSAFETY dissector, and marking them as malformed seems to make sense in such cases. Roland Am 24.09.2011 um 18:21 schrieb Chris Maynard chris.mayn...@gtech.com: mmann78@... writes:

Re: [Wireshark-dev] catching [Malformed Packet]

2011-09-24 Thread Roland Knall
On Sat, Sep 24, 2011 at 9:09 PM, Guy Harris g...@alum.mit.edu wrote: On Sep 24, 2011, at 9:58 AM, Chris Maynard wrote: Roland Knall rknall@... writes: On a similar topic, how can you mark a package as malformed? Especially generated packages often fail the openSAFETY dissector, and marking

Re: [Wireshark-dev] OpenSafety bug - how to fix?

2011-09-28 Thread Roland Knall
Patch has been submitted https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6400 regards, Roland On Tue, Sep 20, 2011 at 7:39 PM, Chris Maynard chris.mayn...@gtech.com wrote: Roland Knall rknall@... writes: The fix is correct. Are there any other Coverty hits for openSafety, or just

Re: [Wireshark-dev] Is it still ok to create hidden items ?

2011-10-31 Thread Roland Knall
Hi As I just came across something regarding this issue, there is a counter argument to the whole if it is not there, the user may not find it idea. Looking at the way the IP dissector is used, hidden fields have their merits. ip.addr is a more generic way of avoiding ( ip.src == x || ip.dest ==

Re: [Wireshark-dev] Is it still ok to create hidden items ?

2011-10-31 Thread Roland Knall
wrote: Hi, I'd say using a generated field is more elegant :-) /Anders -Original Message- From: wireshark-dev-boun...@wireshark.org [mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Roland Knall Sent: den 31 oktober 2011 10:51 To: Developer support list for Wireshark Subject

Re: [Wireshark-dev] ERROR:packet.c:1531:heur_dissector_add: assertion failed: (sub_dissectors != NULL) Aborted

2011-11-02 Thread Roland Knall
Hi Could you please just write, how you want to start wireshark? Have you downloaded it from the net, or did you compile the svn version? Usually the message can appear, if wireshark is not able to load the plugins correctly. If you have compiled wireshark for Linux yourself, you usually can

Re: [Wireshark-dev] ERROR:packet.c:1531:heur_dissector_add: assertion failed: (sub_dissectors != NULL) Aborted

2011-11-02 Thread Roland Knall
@Jaap Normally I would agree, but if you are using 1.6.x and wireshark can not find it's plug-ins, the message can be thrown by the openSAFETY dissector. It is fixed in svn, and the fix for 1.6.x is waiting in bugzilla. regards, Roland On Wed, Nov 2, 2011 at 12:25 PM, Jaap Keuter

Re: [Wireshark-dev] ERROR:packet.c:1531:heur_dissector_add: assertion failed: (sub_dissectors != NULL) Aborted

2011-11-02 Thread Roland Knall
didn't provide much context, so him writing to -dev leaded me to believe he's hacking himself. We just won't know until he tells us. PS: what's the bug number for the bugzilla entry regarding this issue? Thanks, Jaap On Wed, 2 Nov 2011 12:28:23 +0100, Roland Knall wrote: @Jaap Normally I

Re: [Wireshark-dev] ERROR:packet.c:1531:heur_dissector_add: assertion failed: (sub_dissectors != NULL) Aborted

2011-11-02 Thread Roland Knall
Ok, some more information How do you write the dissector, in epan/dissectors or as a plugin? Which version of wireshark are you using? Just trunk, or a specific release version (e.g. trunk-1.6)? But my guess would be, that you either you built your dissector as a plugin, or the versions of

Re: [Wireshark-dev] ERROR:packet.c:1531:heur_dissector_add: assertion failed: (sub_dissectors != NULL) Aborted

2011-11-02 Thread Roland Knall
:53 +0100, Roland Knall rkn...@gmail.com wrote: Ok, some more information How do you write the dissector, in epan/dissectors or as a plugin? Which version of wireshark are you using? Just trunk, or a specific release version (e.g. trunk-1.6)? But my guess would be, that you either you built

[Wireshark-dev] Question regarding QT/future Wireshark version

2012-01-05 Thread Roland Knall
Hi Great job so far on the QT version. Although there is clearly some way to go still, I think it is a step in the right direction. I do have a question though. Is there a point in the forseeable future, where new development for the GTK version will cease to exist (and just focus on

Re: [Wireshark-dev] Question regarding QT/future Wireshark version

2012-01-06 Thread Roland Knall
On Fri, Jan 6, 2012 at 1:46 AM, Gerald Combs ger...@wireshark.org wrote: On 1/5/12 12:22 PM, Guy Harris wrote: If the add-ons are in the dissecting code, there's no GUI code there; Wireshark handles the GUI display, and TShark handles the text output.  I doubt that we'll be linking TShark

Re: [Wireshark-dev] Question regarding QT/future Wireshark version

2012-01-11 Thread Roland Knall
Hi On Wed, Jan 11, 2012 at 10:38 AM, Guy Harris g...@alum.mit.edu wrote: On Jan 6, 2012, at 6:15 AM, Roland Knall wrote: Ok, let me clarify the idea. Let's for instance say, that you want to have a graphical representation of the inner-workings of a communication of two machines. BTW

Re: [Wireshark-dev] Question regarding QT/future Wireshark version

2012-01-11 Thread Roland Knall
On Wed, Jan 11, 2012 at 11:25 AM, Guy Harris g...@alum.mit.edu wrote: On Jan 11, 2012, at 2:02 AM, Roland Knall wrote: The same goes for the Conversation List, IO Graph as well as the Endpoint List. Also, following a specific conversation could be tricky. That just sounds like insufficient

[Wireshark-dev] Updating fuzz-menagerie?

2012-02-08 Thread Roland Knall
Hi Short question, two actually. First, there are some entries in the fuzz-menagerie, which do not work, as they are patches. Shouldn't they be removed from the test all together? And my second question, I have added some example capture files to

[Wireshark-dev] How to import the sample captures from SampleCaptures to the menagerie?

2012-02-17 Thread Roland Knall
Hi Uploaded 3 sample captures to the SampleCaptures page on wiki last week. Now some days later, the captures are not appearing in the buildbot waterfall for the CLANG buildbot. I am wondering if I made some mistake, or named the files wrong. Could someone who has access to the system check it

Re: [Wireshark-dev] Building 64 vs. 32-bit question

2012-05-09 Thread Roland Knall
On Wed, May 9, 2012 at 4:55 PM, Beth beth.trid...@gmail.com wrote: I know there is a target type selection at the top of config.nmake, does that apply to everything being built?  E.g. not only the wireshark.exe and other apps, but the plugins as well?  (Is there a way to set different targets

[Wireshark-dev] Problem getting Eclipse working

2012-06-28 Thread Roland Knall
Hi Little off-topic. Wireshark Development is kind of fried on my PC, as I cannot get Eclipse to acknowledge the GLib datatypes. Could someone who is using Eclipse under Linux and has a working project with C/C++ indexeer send me his include path list? Rebuilding, recreating, all things tried

Re: [Wireshark-dev] license question

2012-07-22 Thread Roland Knall
Hi It is good practice and a positive example, if you upload the code or provide it to the main distribution. But nothing prevents you in the GPL to distribute your work to your client, and ask him to pay for it, as long as you provide the sourcecode with the compiled version of the plugin. You

Re: [Wireshark-dev] RFD: Creating subdirectories in epan/dissectors/

2012-08-30 Thread Roland Knall
Hi Would you like to enforce a value for the minimum number of subsequent files in the subdirectories? As I wrote the opensafety package, I would like to split it up a little bit to make it more maintainable, as well as include two new subdissectors, which use the openSAFETY protocol, but are

Re: [Wireshark-dev] Qt compilation.

2012-11-07 Thread Roland Knall
Hi Try not to run cmake but instead run cmake-gui, using the same parameters. Additionally, it is useful to create a separate build directory. therefore, build-files wil not clutter up the src space. So, checkout wireshark, make a goto wireshark, create a directory named build cd into it and

Re: [Wireshark-dev] Fwd: Google Summer of Code 2013

2013-02-14 Thread Roland Knall
Hi I do actually have several ideas, all surrounding the two dissectors for POWERLINK (epl_v2) and openSAFETY (openSAFETY). First, let me explain, I am working for the Austrian company, which invented both protocols and is pushing it behind the user organization EPSG, among several others. I am

[Wireshark-dev] Google Summer of Code

2013-02-27 Thread Roland Knall
Hi As the last discussion towards the GSoC application resulted in a rather long off-topic discussion, I want to restart it. Is there a way / method / wiki-page where we could collect all ideas, and have a vote on them? Therefore we could at least collect some ideas, and if we reach a certain

Re: [Wireshark-dev] Google Summer of Code

2013-02-27 Thread Roland Knall
Thanks, I will add my stuff today kind regards, Roland On Thu, Feb 28, 2013 at 7:39 AM, Gerald Combs ger...@wireshark.org wrote: On 2/27/13 6:06 PM, Roland Knall wrote: Hi As the last discussion towards the GSoC application resulted in a rather long off-topic discussion, I want to restart

Re: [Wireshark-dev] Fwd: Now Accepting Applications for Mentoring Organizations for GSoC 2013

2013-03-23 Thread Roland Knall
Hi I could act as backup as well, if no one else steps up. I will also amend the wiki page today with my projects. Kind regards, Roland Am Samstag, 23. März 2013 schrieb Alexis La Goutte : On Mon, Mar 18, 2013 at 9:57 PM, Gerald Combs ger...@wireshark.orgjavascript:_e({}, 'cvml',

[Wireshark-dev] Source Build using Mac OSX?

2013-03-23 Thread Roland Knall
Hi Can someone point me in the right direction on how to build wireshark successfully using Mountain Lion? So far I am failing spectacularly. Using MacPorts for the necessary libraries and dev-dependencies, and deactivating everything I can not compile (Airpcap amongst those) I tried using cmake

Re: [Wireshark-dev] Source Build using Mac OSX?

2013-03-23 Thread Roland Knall
: On Mar 23, 2013, at 7:51 AM, Roland Knall rkn...@gmail.com wrote: Can someone point me in the right direction on how to build wireshark successfully using Mountain Lion? So far I am failing spectacularly. Using MacPorts for the necessary libraries and dev-dependencies, and deactivating

[Wireshark-dev] Question for data argument of dissector_try_heuristic

2013-03-25 Thread Roland Knall
Hi Under Mac OS X some warnings came up, and among them is a repeated warning about an unused *data parameter for every call to a heuristic dissector. As I do use the heuristic dissector, but do not use the data argument, I looked up every occurence, where dissection is passed to a heuristic

[Wireshark-dev] Request for submission

2013-04-04 Thread Roland Knall
Hello Could I please kindly ask some of the main developers to commit the patch in https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8505 ? Evan Huus, who kindly lend me an ear in getting the patch ready is busy at the moment with exams, but has already cleared the patch. All there is left to

Re: [Wireshark-dev] Request for submission

2013-04-09 Thread Roland Knall
wrote: On Thu, Apr 4, 2013 at 2:50 PM, Roland Knall rkn...@gmail.com wrote: Hello Could I please kindly ask some of the main developers to commit the patch in https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8505 ? Evan Huus, who kindly lend me an ear in getting the patch ready is busy

Re: [Wireshark-dev] Request for submission

2013-04-10 Thread Roland Knall
, Who has time to review this 100kB patch? Thanks, Jaap On 04/09/2013 03:00 PM, Roland Knall wrote: Hi Could I please bump my request one more time on the buglist? I am starting to work on some topics for new features on the dissector, and only want to really start it, as soon

Re: [Wireshark-dev] CMake for Windows

2013-06-26 Thread Roland Knall
Hi As I am somewhat converse in cmake, I can give you a few pointers, if you like. In general for each package a cmake system should look for, a FindPackageName.cmake file should exist in either one of two places: - The local directory (in wireshark underneath src/cmake/modules/Find - Or

Re: [Wireshark-dev] CMake for Windows

2013-06-26 Thread Roland Knall
at 11:35 AM, Graham Bloice graham.blo...@trihedral.com wrote: On 26 June 2013 10:10, Roland Knall rkn...@gmail.com wrote: Hi As I am somewhat converse in cmake, I can give you a few pointers, if you like. In general for each package a cmake system should look for, a FindPackageName.cmake

[Wireshark-dev] Idea for process image dissection

2013-10-13 Thread Roland Knall
Hello I just wanted to bring something by you guys, if it would be worth implementing. I work on the openSAFETY and EPL dissectors. Both are fieldbus specific implementations. As such the communicate process images as payloads. This is the same with nearly all other fieldbus implementations i

Re: [Wireshark-dev] Idea for process image dissection

2013-10-15 Thread Roland Knall
one question though, why is this plugin not part of wireshark? kind regards, Roland On Mon, Oct 14, 2013 at 8:40 PM, Guy Harris g...@alum.mit.edu wrote: On Oct 13, 2013, at 1:17 AM, Roland Knall rkn...@gmail.com wrote: For such a dissection, we need to tell a dissector, how to dissect

Re: [Wireshark-dev] Idea for process image dissection

2013-10-15 Thread Roland Knall
interface as well? I would prefer the first step, as I do have good knowledge of the framework, but very little about GTK. kind regards, Roland On Tue, Oct 15, 2013 at 6:31 PM, Graham Bloice graham.blo...@trihedral.com wrote: On 15 October 2013 17:25, Roland Knall rkn...@gmail.com wrote: Hi I

Re: [Wireshark-dev] Idea for process image dissection

2013-10-16 Thread Roland Knall
, Roland On Wed, Oct 16, 2013 at 7:51 PM, Guy Harris g...@alum.mit.edu wrote: On Oct 15, 2013, at 10:43 PM, Roland Knall rkn...@gmail.com wrote: Ok. But then the question comes up, if a UI interface should be part of Wireshark or part of wsgd. As a last resort wsgd could be ported to wireshark

[Wireshark-dev] Heuristic dissector priority

2013-11-07 Thread Roland Knall
Hi I am currently implementing a generic dissector, which takes a predefined script and dissect payload. Pretty much in a way wsgd (wsgd.fr) does, but some features where lacking for me, and the integration into wireshark did not work for me either. One of the features of my solution is the

Re: [Wireshark-dev] Move plugins/ to epan/dissectors/plugins/

2013-12-11 Thread Roland Knall
Could I once again suggest sub-directories for all dissectors, as long as we are on the subject of changing epan/dissectors?. It would make development easier. I would like to change the openSAFETY plugin to a epan/dissectors/opensafety sub-directory regard, Roland On Wed, Dec 11, 2013 at 10:57

[Wireshark-dev] Gerrit Merge gerrit topic commits

2014-01-30 Thread Roland Knall
Hi I've noticed, that there are now quite a few merge commits in the main wireshark repo: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=history All of them are trivial merges, which means, that local git branches of the developer have been merged by a git pull with the global git

Re: [Wireshark-dev] Gerrit Merge gerrit topic commits

2014-01-30 Thread Roland Knall
to the submit and cherry pick buttons. Evan On Jan 30, 2014, at 6:25 AM, Roland Knall rkn...@gmail.com wrote: Hi I've noticed, that there are now quite a few merge commits in the main wireshark repo: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=history All of them are trivial

Re: [Wireshark-dev] Quick start instructions for Gerrit

2014-01-31 Thread Roland Knall
can live with it. Especially as my company used VSS in the past. regards, Roland On Fri, Jan 31, 2014 at 9:30 AM, Guy Harris g...@alum.mit.edu wrote: On Jan 31, 2014, at 12:17 AM, Roland Knall rkn...@gmail.com wrote: You can also take a look at http://stackoverflow.com/questions/457927/git

Re: [Wireshark-dev] Quick start instructions for Gerrit

2014-01-31 Thread Roland Knall
On Fri, Jan 31, 2014 at 10:40 AM, Guy Harris g...@alum.mit.edu wrote: ...and I use multiple sheets of paper for multiple ideas. I.e., it sounded as if you were talking about using a *single* checked-out tree for *multiple independent* projects, which I would no more do than would I use a

Re: [Wireshark-dev] Quick start instructions for Gerrit

2014-01-31 Thread Roland Knall
:22 AM, Roland Knall rkn...@gmail.com wrote: On Fri, Jan 31, 2014 at 10:40 AM, Guy Harris g...@alum.mit.edu wrote: ...and I use multiple sheets of paper for multiple ideas. I.e., it sounded as if you were talking about using a *single* checked-out tree for *multiple independent* projects, which

Re: [Wireshark-dev] Gerrit Stuck?

2014-02-27 Thread Roland Knall
Judging from the experience I have with my own gerrit installation, it seems, that both patches lack the Verified +1 flag. Setting that and submitting will do the trick. regards, Roland On Thu, Feb 27, 2014 at 3:19 PM, Evan Huus eapa...@gmail.com wrote: I can't seem to submit either of the

Re: [Wireshark-dev] Gerrit Stuck?

2014-02-27 Thread Roland Knall
ssh -p 29418 Code.wireshark.org gerrit And he will Print the help Regards Am Donnerstag, 27. Februar 2014 schrieb Hadriel Kaplan : And we just had an email mid-air collision. :) I can't abandon them, because I can't access them at all through the web page. Is there some way to abandon

Re: [Wireshark-dev] Gerrit Stuck?

2014-02-27 Thread Roland Knall
ssh -p 29418 Code.wireshark.org gerrit And he will Print the help Regards Am Donnerstag, 27. Februar 2014 schrieb Hadriel Kaplan : And we just had an email mid-air collision. :) I can't abandon them, because I can't access them at all through the web page. Is there some way to abandon

[Wireshark-dev] CMake GTK3 bug on Mac OSX

2014-03-09 Thread Roland Knall
Hi I've setup the wireshark dev env via ./macosx-setup.sh and ran cmake, as I did on Linux. But, choosing the GTK3 build, it fails because of missing includes and library definitions. I am using OS X 10.9.2. Specifically clang is not finding the include for atk, pango, cairo and gdk-pixbuf as

Re: [Wireshark-dev] Changing WSMP internal protocol

2014-03-09 Thread Roland Knall
Hi From my past experience, the best way now is via code.wireshark.org . Register for an account and submit the patchset with a preferable detailed description. Also take a look in src/tools/pre-commit for a hook checking for the most common issues with commiting. regards, Roland On Sun, Mar 9,

Re: [Wireshark-dev] GIT tutorials (was: Re: Fix bug in GSM MAP, have problems with GIT)

2014-03-11 Thread Roland Knall
On Tue, Mar 11, 2014 at 6:47 PM, Hadriel Kaplan hadriel.kap...@oracle.com wrote: 4) How do you know if someone has a fix or not? With subversion, they'd indicate they're running svn r51234, for example, and then you could tell them that they need to update to at least r52345. With git, how

Re: [Wireshark-dev] Gerrit versus Buildbot

2014-03-20 Thread Roland Knall
Fyi, the current Version of Jenkins works just fine with gerrit 2.8.2 on my setup. Regards, Roland Am Donnerstag, 20. März 2014 schrieb Gerald Combs : On 3/20/14 11:40 AM, Chris Kilgour wrote: Just had the unpleasant experience of having a patch submitted to gerrit where it sat for nearly

Re: [Wireshark-dev] TCP dissector design

2014-04-17 Thread Roland Knall
Hi Not in general by the distinction of the different protocol versions, but you could take a glance at the openSAFETY dissector, which basically supports a variant of transport layers and a heuristic to determine the possition of the packages in each transport layer. If you take a look at it

[Wireshark-dev] Mac compilation broken

2014-04-17 Thread Roland Knall
Hi Just filed bug #1 ;-). Mac compilation is broken, due to 'extern' variable has an initializer See https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1 for compile output. regards, Roland ___ Sent via:

Re: [Wireshark-dev] Mac compilation broken

2014-04-17 Thread Roland Knall
://www.wireshark.org/download.html to claim your prize and enter Bug1 in the checkout screen. (Wait... maybe I shouldn't give out the free copy checkout code to the whole -dev list, then lots of people will end up with free copies of Wireshark) -Original Message- From: Roland

Re: [Wireshark-dev] plugin.c error !!

2014-05-05 Thread Roland Knall
Hi Khemis In the sub-directory /doc in your wireshark src are various README file, which contain the answers to your questions. In your case it is README.developer and README.plugins. In this case you have incorrectly named the proto and handoff register functions. Also, take a look at existing

[Wireshark-dev] Walk capture_global_opts to find interface

2014-05-08 Thread Roland Knall
Hi During development of the extcap interface I stumbled across an issue, which could easily be fixed, if I could get the interface_t struct element for an iface name. To the point, one extcap program may allow more than one interface for managment. But capture_get_if_capabilities just gets the

Re: [Wireshark-dev] RFC: Internally Generated Records

2014-08-04 Thread Roland Knall
Hello Evan Just a little side-note, could you explain what you mean by records? With the openSAFETY dissector I voiced the issue some time ago, that openSAFETY in itself is a protocol, where it may end up being multiple nodes sending data in the same ethernet frame. Your solutions seem similar,

Re: [Wireshark-dev] RFC: Internally Generated Records

2014-08-04 Thread Roland Knall
On Mon, Aug 4, 2014 at 10:40 PM, Evan Huus eapa...@gmail.com wrote: Right now you can't filter on field combinations that must appear together in one of those application frames: if fieldA appears in frame 1, and fieldB appears in frame 2, then that packet will match fieldA fieldB even if

Re: [Wireshark-dev] RFC: Internally Generated Records

2014-08-04 Thread Roland Knall
Am 04.08.2014 um 23:16 schrieb Evan Huus eapa...@gmail.com: On Aug 4, 2014, at 17:11, Roland Knall rkn...@gmail.com wrote: On Mon, Aug 4, 2014 at 10:40 PM, Evan Huus eapa...@gmail.com wrote: Right now you can't filter on field combinations that must appear together in one

  1   2   3   4   5   >