Re: [Wireshark-dev] Dissector pipelines suggestion

On Feb 6, 2007, at 3:56 PM, Shehjar Tikoo wrote: > Hi all > > With regards to the NFS anonymizer that I am working on currently, I > was > wondering, whether a feature like multiple dissectors for single > protocol would be a good idea. > > Mainly, the idea is that there can be a pipeline or a

[Wireshark-dev] Dissector pipelines suggestion

Hi all With regards to the NFS anonymizer that I am working on currently, I was wondering, whether a feature like multiple dissectors for single protocol would be a good idea. Mainly, the idea is that there can be a pipeline or a queue of dissectors for the same protocol but only one of them h

Re: [Wireshark-dev] Dissector works with .pcap file but does not work with .pkt file

The way things work *.pkt can be in any format, wiretap recognizes file types by its contents. Can you be more specific about the file format? If you use capinfos, what it says about it? BTW, In order to have it fixed we need two files that show this behaviour. You could write a bug report on this

Re: [Wireshark-dev] Dissecting XML payload

There's not full DTD support (some features are not implemented, some DTDs need to be massaged) but there's enough to obtain fileds against which to filter from a DTD file. To have your DTD file loaded you can copy it in the dtds/ directory that you can find in the data directory (the one with wi

[Wireshark-dev] Dissecting XML payload

Want to dissect XML payload in a TCP packet. I have the dissector working (dissecting the header), but now I need to dissect the XML payload. http://wiki.wireshark.org/XML mentions it can be done if you have the Document Type Definition (DTD) file. Has anyone done this or have an example they

[Wireshark-dev] Dissector works with .pcap file but does not work with .pkt file

Has anyone encountered this problem ? Regards, Jim Hartwig Texas Engineering Center Voice:972. 952. 3307 Raynet: 427. 3307 ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

[Wireshark-dev] [Patch] Request response tracking for SMPP

Hi Everyone, I am not quite sure if there is a reason why the SMPP dissector doesn't support request-response tracking yet. I could not find any in the mailing list archives. The attached patch adds this functionality. It's pretty much a copy of from the example (from packet-pana.c). It has bee

Re: [Wireshark-dev] Dissector for Cisco ITP packet logging facility

On Tue, Feb 06, 2007 at 09:53:32AM +0800, Jeff Morriss wrote: > > I have just on concern... The Cisco allows the user to set the syslog > > facility and severity when starting the debug. The values you saw were > > the default values. Therefore, checking for LOCAL0/DEBUG only might > > cause proble

Re: [Wireshark-dev] U3 questions/remarks

Graeme Lunt wrote: > The name would be something like "0.99.5", "0.99.6-SVN-20681" or > "Version 0.99.5". > > Producing a name-based GUID of this version string is both standard > and future-proof - as you note, the version numbering may change. It > also allows developers to use non-standard namin

Re: [Wireshark-dev] [PATCH] Multiple pdus atop TCP -- a lie in README.developer?

Richard van der Hoff wrote: >> In short, I think the relevant section of README.developer needs a >> rewrite. I attach a patch - comments welcome. Please could somebody review the patch? I know it's only documentation, but it strikes me that developer documentation telling people the wrong thin

Re: [Wireshark-dev] protocol decoding module

Thanks you for your answer. However, the site doesn't seem to support the library that I wanted. I'm so sorry, but can you please let me know when NetBee will be availble? The proposal of other solutions would be much grateful. Thank you. -Original Message- From: [EMAIL PROTECTED] [mail

Re: [Wireshark-dev] Option to allow processing of unrecognisedData-link level PCAP file

Thanks for the suggestion from yourself and Anders. It looks like (together with editing the file's DLT) this will do nicely. I hadn't noticed the DLT User dissector functionality before - I've managed to get it working, but is there any documentation on it? I can't find any in the user guide or o

Re: [Wireshark-dev] [REPOST][PATCH] update USB dissector

On Tue, 2007-02-06 at 11:30 +1100, ronnie sahlberg wrote: > You also did BlueTooth for pcap? so could you update > http://wiki.wireshark.org/CaptureSetup/Bluetooth > since it appears to be a bit out of date:-) This is on my todo list, but, since some fix is still required on the libpcap side, fir

Re: [Wireshark-dev] "Decode Selected Bytes As"

Stig, > I have some ASN.1 captures with a octetstring containing another ASN. > 1 block. > This is shown as: > > OCTETSTRING: 308204CE81... > > I would really like to have a "Decode Selected Bytes As" function to > dissect this block as ASN.1 without having to "Export Selected Packet > Bytes..."