Re: [Wireshark-dev] TCP ZeroWindowProbe problem / question

2007-02-19 Thread ronnie sahlberg
On 2/20/07, Ulf Lamping <[EMAIL PROTECTED]> wrote: > Hi List! > > As I'm not an expert on TCP, I have a problem which seems to be related > to the TCP's ZeroWindowProbe mechanism. As I digged deeper into the > docs, I've found a difference between our Wiki and the TCP RFC (well, > and a lack of kno

[Wireshark-dev] Stats_tree generalization

2007-02-19 Thread Andy Howell
Hello, I've just added support for "tap" and stats_tree in my dissector. I would like to have a stats_tree-like display that includes my own columns. In particular, I want a summary of the number of bytes sent by each message type in my protocol. I can see three options: 1) Modify th

[Wireshark-dev] TCP ZeroWindowProbe problem / question

2007-02-19 Thread Ulf Lamping
Hi List! As I'm not an expert on TCP, I have a problem which seems to be related to the TCP's ZeroWindowProbe mechanism. As I digged deeper into the docs, I've found a difference between our Wiki and the TCP RFC (well, and a lack of knowledge on my side on this topic). To quote our Wiki http

Re: [Wireshark-dev] Build problem (was Re: Patch for bug 310)

2007-02-19 Thread Anders Broman
Hi, You are building with MSVC6, right? Have you tried to download a recent SVN snapshot and doing: nmake –f makefile.nmake setup nmake –f makefile.nmake distclean nmake –f makefile.nmake without changing anything else first. Best regards Anders Från: [E

Re: [Wireshark-dev] [PATCH] New menu items to copy packet data

2007-02-19 Thread Stephen Fisher
On Tue, Feb 20, 2007 at 01:06:16AM +0100, Luis Ontanon wrote: > That sounds familiar... Just today I noticed that if I enable Lua on > windows the "Tools" menu (that is hidden unless Lua uses it) ends up > as a submenu of "User Tables". As in your case this infact does not > happen on my mac. T

Re: [Wireshark-dev] [PATCH] New menu items to copy packet data

2007-02-19 Thread Stephen Fisher
On Mon, Feb 19, 2007 at 07:10:53PM -0800, Guy Harris wrote: > > On Feb 19, 2007, at 3:50 PM, Stephen Fisher wrote: > > > I've committed the initial version of this new feature as SVN revision > > 20867. Can others please try it out and let me know their comments on > > the implementation. It's

Re: [Wireshark-dev] [PATCH] New menu items to copy packet data

2007-02-19 Thread Guy Harris
On Feb 19, 2007, at 3:50 PM, Stephen Fisher wrote: > I've committed the initial version of this new feature as SVN revision > 20867. Can others please try it out and let me know their comments on > the implementation. It's under Statistics -> Content List -> HTTP. I'm not sure "Statistics" is

Re: [Wireshark-dev] [PATCH] New menu items to copy packet data

2007-02-19 Thread Luis Ontanon
That sounds familiar... Just today I noticed that if I enable Lua on windows the "Tools" menu (that is hidden unless Lua uses it) ends up as a submenu of "User Tables". As in your case this infact does not happen on my mac. The reason of the different behaviour is still unknown to me. As I think i

Re: [Wireshark-dev] [PATCH] New menu items to copy packet data

2007-02-19 Thread Stephen Fisher
On Mon, Feb 19, 2007 at 03:50:57PM -0800, Stephen Fisher wrote: > However, The statistics menu is messed up in my Windows build > environment (MSVC 2005 EE). Everything is one off from the group it > should be in. The HTTP option is still buried within the content list > menu. Anyone else se

Re: [Wireshark-dev] [PATCH] New menu items to copy packet data

2007-02-19 Thread Stephen Fisher
On Wed, Feb 07, 2007 at 04:52:50PM -0800, Stephen Fisher wrote: > On Wed, Jan 31, 2007 at 04:01:39AM +0100, Ulf Lamping wrote: > > > Other analyzers will provide you with a list of files, derived from > > the captured HTTP packets, with an option to display/export it. > > I'm now working on add

Re: [Wireshark-dev] Build problem (was Re: Patch for bug 310)

2007-02-19 Thread Prokash Sinha
Now I turn the pcap back on ( since the previous one giving me head file pcap.h was not found ). Watch how link problems comes up ( but the pcap build is almost done ). If I try to rebuld the pcap by going down that path and issue the same command, I would be fine. And later build from the root a

Re: [Wireshark-dev] Build problem (was Re: Patch for bug 310)

2007-02-19 Thread Prokash Sinha
When all the optional components are off ( that is the header inclusion path is commented out in the conf.nmake) I see the following error from pcap. It seems like the build process does not know how to honor this - And if I just put that header path back in this is no more a point of failure, bu

Re: [Wireshark-dev] Build problem (was Re: Patch for bug 310)

2007-02-19 Thread Prokash Sinha
I'm sorry for not creating a thread. I'm using http base email, and it is bouncing on this list. Okay here is my experience so far. (Some of them would not be very very accurate, since I was not logging all what I had been seeing ) 1) I was expecting that I will install cygwin ( not necessary al

Re: [Wireshark-dev] Saving settings as "Profiles"

2007-02-19 Thread Michael Lum
"Apply" as in function as a display filter. -- Michael Lum Principal Software Engineer 4600 Jacombs Road +1.604.276.0055 Richmond, B.C. Canada V6V 3B1 UTStarcom Canada, Inc. CDMA Division > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROT

[Wireshark-dev] Build problem (was Re: Patch for bug 310)

2007-02-19 Thread Jaap Keuter
Hi, 1. Please start a new thread when discussing a new subject 2. What is your idea about using cygwin libs? You're advice to use provided libs. 3. Have you followed the developer manual? I've done so just a month ago, building just fine. So have others. Thanx, Jaap _

Re: [Wireshark-dev] Patch for bug 310

2007-02-19 Thread Prokash Sinha
I'm now seeing an old problem - C:\Documents and Settings\psinha\wireshark\epan\dissectors>nmake -f Makefile.nma ke Microsoft (R) Program Maintenance Utility Version 6.00.9782.0 Copyright (C) Microsoft Corp 1988-1998. All rights reserved. cl -DWIN32 -DNULL=0 -D_MT -D_DLL -DHAVE_CONFIG

Re: [Wireshark-dev] Problem LUA+H248

2007-02-19 Thread Luis Ontanon
Well, this is an odd one... the way ASN1 elements are added to the tree is somewhat twisted... I'll be investigating how these are made... What you want is "h248.id" that is a byte-string containing the termination id you are looking for terminationId is something else in the syntax. as a rule of

Re: [Wireshark-dev] Patch for bug 310

2007-02-19 Thread Ulf Lamping
Steve Schaeffer wrote: > Let us review... > > I submitted this bug report 18 months ago and you said you'd have a look at > it. > I *had* a look at that problem some time ago, and tried a few hours to fix it - when I remember correct I dropped my test because of a completely wrong approach. >

[Wireshark-dev] Problem LUA+H248

2007-02-19 Thread [EMAIL PROTECTED]
Hello, I have a problem using LUA with h248. I wrote a script trying to take only one communication out of a capture file. The problem is when I want to have the terminationID, it doesn't work. He doesn't find it. Here are the code lines: terminationId = Field.new("h248.terminationID") extract_c

Re: [Wireshark-dev] Patch for bug 310

2007-02-19 Thread Steve Schaeffer
Ulf Lamping wrote: >>Steve Schaeffer wrote: >> >>This patch fixes the issue of adding list widget numbers to the packet >>history instead of adding frame numbers. > >No it doesn't! > >After applying the display filter, the history is completely empty now. > > >Did you even tried that patch yoursel

Re: [Wireshark-dev] Malformed packet New dissector

2007-02-19 Thread your highness
On 2/19/07, your highness <[EMAIL PROTECTED]> wrote: > On 2/16/07, Guy Harris <[EMAIL PROTECTED]> wrote: > > > > On Feb 16, 2007, at 7:06 AM, your highness wrote: > > > > > Hi everyone, > > > > > > I managed to write a dissector for a new protocol (Condor) and it > > > works most of the time ; ) ..

Re: [Wireshark-dev] Malformed packet New dissector

2007-02-19 Thread your highness
On 2/19/07, Guy Harris <[EMAIL PROTECTED]> wrote: > your highness wrote: > > > The skeleton of my code that is relevant to this issue is as follows: > > > > static guint > > get_condor_pdu_len(tvbuff_t *tvb, int offset) > > At least in the current version of Wireshark, a get_pdu_len routine > takes

Re: [Wireshark-dev] Malformed packet New dissector

2007-02-19 Thread your highness
On 2/16/07, Guy Harris <[EMAIL PROTECTED]> wrote: > > On Feb 16, 2007, at 7:06 AM, your highness wrote: > > > Hi everyone, > > > > I managed to write a dissector for a new protocol (Condor) and it > > works most of the time ; ) ... Thanks to Jaap Keuter and the README > > files. I am starting a new

Re: [Wireshark-dev] H.223 dissector - separate "bitswapping" into separate dissector

2007-02-19 Thread Richard van der Hoff
Anders Broman wrote: > Richard van der Hoff wrote: > >> Well, if your H.223 is over TCP, it may or may not be bitswapped > > Guy wrote: >> That presumably means that either >> >> 1) call setup negotiates the bit order >> >> or >> >> 2) the bit order is chosen "out of band" (e.g., manual

Re: [Wireshark-dev] Problems building the SVN version without having an installed version

2007-02-19 Thread Michael Tuexen
On Feb 19, 2007, at 12:46 AM, Guy Harris wrote: > Michael Tuexen wrote: > >> on a Mac OS X 10.4 system make fails with > > ... > >> So why is /usr/local/lib/libwireshark.0.0.1.dylib referenced >> explicitly? > > I don't know - I tried moving my installed (in /usr/local/lib) > versions >

Re: [Wireshark-dev] Building RPM with Lua support

2007-02-19 Thread Douglas Pratley
Thanks for getting back to me. I'll try finding the lua.h file and specifying the directory explicitly and let you know how I get on. But can I emphasise that "--with-lua" on its own does build a Lua aware Wireshark that works when doing a normal "make all". It is only when doing a "make rpm-packa