[Wireshark-users] tcpdump capture for wireshark problems

2007-11-21 Thread Nikolay Shopik
Hi list, I'm trying to capture packtes with tcpdump and later view captured file with wireshark but it always tell me what file captured in "middle of something.." I'm using such command line: tcpdump -s 1516 -ieth0 -w sample.cap Running on debian etch and debian testings ___

[Wireshark-users] Wireshark 0.99.7pre1 is now available

2007-11-21 Thread Gerald Combs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wireshark 0.99.7pre1 is now available for testing. Source code and a Windows installer can be downloaded immediately from http://www.wireshark.org/download/prerelease/wireshark-0.99.7pre1.tar.gz http://www.wireshark.org/download/prerelease/wireshark-

Re: [Wireshark-users] How do I go about creating a custom packet data decode

2007-11-21 Thread Guy Harris
Owens, Neil wrote: > I'm up against it here and just need to (simply?) XOR all packet data > with a HEX value. "All packet data" in the sense of "every single packet captured", or "all packet data" as in "all packet data for some particular protocol"?

Re: [Wireshark-users] How do I go about creating a custompacket data decode

2007-11-21 Thread Gerald Combs
Owens, Neil wrote: > Steve > > It's for all UDP traffic on a specific port. I'm currently on Windows > XP, but if a flavour of Linux makes it easier, then so be it. In that case, you'd probably want to make a copy of the packet data, XOR it, and add the XORed data as a new data source for the pa

Re: [Wireshark-users] How do I go about creating a custompacket data decode

2007-11-21 Thread Owens, Neil
Steve It's for all UDP traffic on a specific port. I'm currently on Windows XP, but if a flavour of Linux makes it easier, then so be it. Neil Owens Support Specialist Room 4240 TVC Wood Lane London, W12 7RJ +44(0) 20 8225 8685 (GMT) http://www.enps.com -Original Message-

[Wireshark-users] Bluetooth card driver

2007-11-21 Thread sfayssal
Hello Wireshark Users: Can anybody that used wireshark with bluetooth help me finding the right bluetooth card and driver for Windows and Linux. Thanks for any help, Sam ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wiresha

Re: [Wireshark-users] How do I go about creating a custom packet data decode

2007-11-21 Thread Jaap Keuter
Hi, I don't know why you need this but the most definite way to do it is patch dissect_packet in epan/packet.c. Just insert the line int i; for (i=0; icap_len; i++) pd[i] ^= YOUR_VALUE_HERE; before the call to tvb_new_real_data() and recompile Wireshark. This will XOR all packet data of all packe

[Wireshark-users] Vista

2007-11-21 Thread Carl Sampson
Hi, I'm running Wireshark 0.99.6a and winpcap 4.02 on Vista Home Premium. When I do captures I am noticing that the display seems to update every second and the display of packets is usually behind by about 10 seconds. I can unplug from the network and the display will still show packets coming

Re: [Wireshark-users] How do I go about creating a custom packet data decode

2007-11-21 Thread Stephen Fisher
On Wed, Nov 21, 2007 at 01:59:54PM -, Owens, Neil wrote: > I'm up against it here and just need to (simply?) XOR all packet data > with a HEX value. I just don't know enough about Wireshark to be able > to do this . While I'm not asking for a complete solution could > someone point me at som

[Wireshark-users] How do I go about creating a custom packet data decode

2007-11-21 Thread Owens, Neil
Hi all I'm up against it here and just need to (simply?) XOR all packet data with a HEX value. I just don't know enough about Wireshark to be able to do this . While I'm not asking for a complete solution could someone point me at something a little more specific than the Wireshark Users manual