Re: [Wireshark-dev] text2pcap help needed

2007-01-08 Thread Guy Harris
On Jan 8, 2007, at 10:30 PM, [EMAIL PROTECTED] wrote: > Could anyone please explain how the above values produced such > display ( version : 4 , header length : 24 , etc. ) in the wireshark > gui. Step 1: order a copy of TCP/IP Illustrated, Volume 1 and read chapters 1, 2, and 3.

Re: [Wireshark-dev] [Wireshark-commits] rev 20334:/trunk//trunk/asn1/ansi_map/: ansi_map.asnansi_map.cnfpacket-ansi_map-template.c/trunk/epan/dissectors/:packet-ansi_map.c packet-ansi_map.h

2007-01-08 Thread Kukosa, Tomas
OK I will commit changes tomorrow if no complain is received. Meantime I will look again at SSL/TLS desegmentation which makes me headache. Mailcode: C0gmHhFp -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Anders Broman (AL/EAB) Sent: Monday, January 08

[Wireshark-dev] text2pcap help needed

2007-01-08 Thread jaiswal.vikash
Hi , I tried writing a file "test", whose contents were (this is taken from man page for text2pcap): 00 00 e0 1e a7 05 6f 00 10 08 5a a0 b9 12 08 00 46 00 10 03 68 00 00 00 00 0a 2e 18 ee 33 0f 19 08 7f 0f 19 20 03 80 94 04 00 00 10 01 28 16 a2 0

[Wireshark-dev] MD5 broken

2007-01-08 Thread LEGO
After spending (wasting) several hours debugging my SNMPv3 USM authentication code I found out that our md5 implementation is broken! It returns just plain wrong digests! "12345" should yield 827ccb0eea8a706c4c34a16891f84e7b but instead it yields cad0f574e6b876f5248314742bb09b7c I'll see if I ca

Re: [Wireshark-dev] Patch for Megaco dissector plugin

2007-01-08 Thread Stephen Fisher
On Mon, Jan 08, 2007 at 09:42:38PM -, Mike Davies wrote: > There was a change in Corrigendum 1 (03/2004) to H.248.1 which allows > an empty {} to be omitted from the Signal Descriptor. Currently (SVN > 20346) this causes Wireshark to report [Packet size limited during > capture] as shown i

[Wireshark-dev] [PATCH][UPDATE] ptvcursor : one step further?

2007-01-08 Thread Sebastien Tandel
Hi, I've updated the patch for ptvcursor taking into account the ideas of Guy. Features supported by ptvcursor : - multiple levels (256 max.), allocation per 8 levels. - Two new functions creating an item in the tree and pushing a subtree at the same time. These two functions accept an und

Re: [Wireshark-dev] gentoo section addition to user guide

2007-01-08 Thread Sebastien Tandel
Stephen Fisher wrote: > On Mon, Dec 18, 2006 at 12:44:01AM +0100, Sebastien Tandel wrote: > > >>May you add in the Debian/Ubuntu section (at least for these >> distributions, I don't know for others) that if they want compile >> wireshark with gtk+2, they have to install libxext6-dev, libx

Re: [Wireshark-dev] Microsoft Visual C Version 6support isa bitoutdated ...

2007-01-08 Thread Ulf Lamping
Laurent Rabret wrote: > Hi Andrew, > Maybe your linker errors stems from bad compiler options. Initially I > recommended to remove some default libs and to force msvcrxx thanks to > /DEFAULTLIB and /NODEFAULTLIB options in LOCAL_LDFLAGS (in > the config.nmake file). Actually, it was probably a b

Re: [Wireshark-dev] Microsoft Visual C Version 6support isa bitoutdated ...

2007-01-08 Thread Laurent Rabret
Hi Andrew, Maybe your linker errors stems from bad compiler options. Initially I recommended to remove some default libs and to force msvcrxx thanks to /DEFAULTLIB and /NODEFAULTLIB options in LOCAL_LDFLAGS (in the config.nmakefile). Actually, it was probably a bad solution and I recommend to remo

Re: [Wireshark-dev] R: [Wireshark-commits] rev 20318: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-ieee80211.c

2007-01-08 Thread Gerald Combs
Davide Schiera wrote: > What about "wpa-phx:MyPassword:SSID WITH\x00INSIDE"? > And for the ":" -> "\x3A" or \:"? That would work too. Along with C-style encoding there's RFC 3986-style percent encoding, e.g. "SSID WITH%00INSIDE" and "My%3aPassword". Does anyone strongly prefer one over the othe

[Wireshark-dev] R: [Wireshark-commits] rev 20318: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-ieee80211.c

2007-01-08 Thread Davide Schiera
DS>-Messaggio originale- DS>Da: [EMAIL PROTECTED] [mailto:wireshark-dev- DS>[EMAIL PROTECTED] Per conto di Gerald Combs DS>Inviato: lunedì 8 gennaio 2007 20.09 DS>A: Developer support list for Wireshark DS>Oggetto: Re: [Wireshark-dev] [Wireshark-commits] rev 20318: DS>/trunk/epan/dissecto

Re: [Wireshark-dev] [Wireshark-commits] rev 20318: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-ieee80211.c

2007-01-08 Thread Gerald Combs
Joerg Mayer wrote: > On Sun, Jan 07, 2007 at 10:28:46PM -0800, Gerald Combs wrote: Don't lower-case our SSID and passphrase, otherwise we'll create an incorrect PSK hash. >>> The code still makes another mistake: The SSID is not a string - it's a >>> binary object which may even contain

[Wireshark-dev] someone up for 802.15.4 ?

2007-01-08 Thread Jan Kokott
Hello, I just wanted to know if someone is already at work with a plugin for the 802.15.4 protocol in wireshark ? I didn´t find any folder in the plugin section and wanted to start on the plugin. Jan ___ Wireshark-dev mailing list Wireshark-dev@wiresh

Re: [Wireshark-dev] [Wireshark-commits] rev 20334: /trunk//trunk/asn1/ansi_map/: ansi_map.asn ansi_map.cnfpacket-ansi_map-template.c /trunk/epan/dissectors/:packet-ansi_map.c packet-ansi_map.h

2007-01-08 Thread Anders Broman \(AL/EAB\)
Hi, I think thats a good idea. But perhaps we should wait a day or two to see if we get any complaints on The new ANSI MAP dissector and the plans to move the files. Lets say that if no one oposes we'll move the files on Wednesday. BR Anders -Original Message- From: [EMAIL PROTECTED] [mai

Re: [Wireshark-dev] [Wireshark-commits] rev 20318: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-ieee80211.c

2007-01-08 Thread Joerg Mayer
On Sun, Jan 07, 2007 at 10:28:46PM -0800, Gerald Combs wrote: > >> Don't lower-case our SSID and passphrase, otherwise we'll create an > >> incorrect PSK hash. > > > > The code still makes another mistake: The SSID is not a string - it's a > > binary object which may even contain 0x00 in the mid

Re: [Wireshark-dev] Microsoft Visual C Version 6 support isa bitoutdated ...

2007-01-08 Thread Ulf Lamping
Andrew Hood wrote: > > The simplest solution would probably be to not download zlib123 but > instead to download the source zlib-1.2.3 and compile it. That way the > same MSVCR* gets used throughout. > I've checked it in a change that MSVC 6 runs like before, while every other version downloads

Re: [Wireshark-dev] signedness of comparison functions in ftype-integer.c

2007-01-08 Thread Martin Mathieson
On 1/4/07, Martin Mathieson <[EMAIL PROTECTED]> wrote: On 1/3/07, Guy Harris <[EMAIL PROTECTED]> wrote: > Martin Mathieson wrote: > > > For the more general problem, I see 2 possible solutions: > > (1) have both signed and values in the union, and use the appropriate > > signed or unsigned parts

Re: [Wireshark-dev] Microsoft Visual C Version 6 support isa bitoutdated ...

2007-01-08 Thread Andrew Hood
Ulf Lamping wrote: > Andrew Hood wrote: > >>Reading >>gzipped pcap files does work. >> > > That's the next I will look for - how to do this in a clean.way for all > compiler variants. The simplest solution would probably be to not download zlib123 but instead to download the source zlib-1.2.3

Re: [Wireshark-dev] [Wireshark-commits] rev 20334: /trunk/ /trunk/asn1/ansi_map/: ansi_map.asn ansi_map.cnf packet-ansi_map-template.c /trunk/epan/dissectors/: packet-ansi_map.c packet-ansi_map.h

2007-01-08 Thread Kukosa, Tomas
Hello, the only ASN.1 plugin uses old asn1.c/.h files now. I would propose to move them into plugin/asn1 directory. (I have it tested and it works) Does anybody still need them in the epan directory? Tomas -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf