Package: wireshark Version: 1.2.10-1.1 Severity: wishlist Tags: patch upstream
Hi, wireshark currently lacks the ability to write plugins with SLL dissectors for linux specific packages. I found a fix available here: http://www.sven-fuelster.com/2010/05/30/pcan-in-wireshark/ here is the webcache entry from google (since page currently returns Error 500): http://webcache.googleusercontent.com/search?q=cache:fs8C-K9XdsgJ:www.sven-fuelster.com/2010/05/30/pcan-in-wireshark/+%22sll.ltype%22&cd=1&hl=en&ct=clnk&gl=de I modified the patch, so that it can be used for any kind of linux SLL package. It applies cleanly in 1.2.10 and has still not been fixed upstream (please forward the bug). I tested the patch successfully with sniffed phonet packages from an Nokia N900 modem. -- Sebastian -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (500, 'testing'), (100, 'unstable'), (50, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.36-rc2 (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages wireshark depends on: ii libatk1.0-0 1.30.0-1 The ATK accessibility toolkit ii libc-ares2 1.7.3-1 library for asyncronous name resol ii libc6 2.11.2-2 Embedded GNU C Library: Shared lib ii libcairo2 1.9.6-6.1 The Cairo 2D vector graphics libra ii libcomerr2 1.41.12-2 common error description library ii libfontconfig1 2.8.0-2.1 generic font configuration library ii libfreetype6 2.4.2-1 FreeType 2 font engine, shared lib ii libgcrypt11 1.4.5-2 LGPL Crypto library - runtime libr ii libglib2.0-0 2.25.11-3 The GLib library of C routines ii libgnutls26 2.8.6-1 the GNU TLS library - runtime libr ii libgtk2.0-0 2.21.5-1 The GTK+ graphical user interface ii libk5crypto3 1.8.3+dfsg~beta1-1 MIT Kerberos runtime libraries - C ii libkrb5-3 1.8.3+dfsg~beta1-1 MIT Kerberos runtime libraries ii libpango1.0-0 1.28.1-1 Layout and rendering of internatio ii libpcap0.8 1.1.1-2 system interface for user-level pa ii libpcre3 8.02-1.1 Perl 5 Compatible Regular Expressi ii libportaudio2 19+svn20071022-3+b1 Portable audio I/O - shared librar ii libsmi2ldbl 0.4.8+dfsg2-2 library to access SMI MIB informat ii wireshark-common 1.2.10-1.1 network traffic analyzer - common ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime wireshark recommends no packages. wireshark suggests no packages. -- no debconf information
Description: add support for sll.ltype hooks Forwarded: no Author: Sebastian Reichel <[email protected]> Index: b/epan/dissectors/packet-sll.c =================================================================== --- a/epan/dissectors/packet-sll.c 2010-07-29 01:22:01.000000000 +0200 +++ b/epan/dissectors/packet-sll.c 2010-08-25 19:45:54.000000000 +0200 @@ -92,6 +92,7 @@ { 0, NULL } }; +static dissector_table_t sll_linux_dissector_table; static dissector_table_t gre_dissector_table; static dissector_handle_t ipx_handle; static dissector_handle_t llc_handle; @@ -266,7 +267,8 @@ break; default: - call_dissector(data_handle, next_tvb, pinfo, tree); + if(!dissector_try_port(sll_linux_dissector_table, protocol, next_tvb, pinfo, tree)) + call_dissector(data_handle, next_tvb, pinfo, tree); break; } } else { @@ -344,6 +346,13 @@ "SLL", "sll" ); proto_register_field_array(proto_sll, hf, array_length(hf)); proto_register_subtree_array(ett, array_length(ett)); + + sll_linux_dissector_table = register_dissector_table ( + "sll.ltype", + "Linux protocol type", + FT_UINT16, + BASE_HEX + ); } void
