[Wireshark-dev] question about TCP flag DESEGMENT_UNTIL_FIN

2007-07-31 Thread yin sun
Hello, I found out that, When a subdissector on top of TCP set if (pinfo->can_desegment) { pinfo->desegment_len = DESEGMENT_UNTIL_FIN; return; } when pinfo->can_desegment is 0 again, subdissector received the whole TCP stream in tvb minus the payload from the FIN packet. Is

Re: [Wireshark-dev] Wireshark Logo/Icons

2007-07-31 Thread Guy Harris
Rodney Dawes wrote: > I've drawn a set of icons[1] in the Tango[2] style. Would it be possible > to get these icons into the wireshark source as the primary application > icon? ...at least for UN*X+X11 desktops. I don't know what the "right" style would be for Windows (and would it change betwe

[Wireshark-dev] Wireshark Logo/Icons

2007-07-31 Thread Rodney Dawes
Hi, I've drawn a set of icons[1] in the Tango[2] style. Would it be possible to get these icons into the wireshark source as the primary application icon? Thanks. -- dobey [1] http://wayofthemonkey.com/wireshark-icons.png [2] http://tango.freedesktop.org/ _

Re: [Wireshark-dev] Improve Tcap session management

2007-07-31 Thread Florent Drouin
The ASN1 definition for the ANSI Tcap seems to be currently outdated. (no [PRIVATE 18] decoding ) So that a good thing to update the ANSI part, (the ITU part seems to be ok). But, on the other hand, I have seen tcap stack using the old syntax. For example, I have seen Abort with [PRIVATE 24]. So,

Re: [Wireshark-dev] Remote Desktop color palette problem

2007-07-31 Thread Andrew Hood
Gerald Combs wrote: > Maynard, Chris wrote: > >>It seems that when running Wireshark 0.99.6 over a Windows XP Remote >>Desktop connection, there's a problem with the color palette, such that >>the text color is always white, rather than black. While it makes the >>text hard to read on a gray back

Re: [Wireshark-dev] how to add a dissector to an existing installationof wireshark

2007-07-31 Thread Michael Jakobs
Thanks for this information. It really worked with VC6! Stratemeier, Frank wrote: > Hi Michael! > > It is possible to distribute the plugin. > Have a look at http://wiki.wireshark.org/Development/CommonProblems in the > last section ;). > > Have fun! > > Frank > > -Ursprüngliche Nachricht

Re: [Wireshark-dev] Improve Tcap session management

2007-07-31 Thread Luis EG Ontanon
It would be lovely to have TCAP applications registering by OID instead of using the SCCP SSN. On 7/30/07, Anders Broman <[EMAIL PROTECTED]> wrote: > Hi, > I have plans to change the TCAP dissection to use the original unchanged > ASN1 code and to split it into ITU TCAP and ANSI TCAP with heuristi

[Wireshark-dev] LLDP-MED Location Identification - Coordinate Based LCI - rfc3825

2007-07-31 Thread Karl Heinz Wolf
hi, I tried to decode LLDP-MED Location Identification with Coordinate Based LCI with Wireshark. Encoding according to rfc3825 of the location information was done by this encoder: http://www.enum.at/rfc3825encoder.529.0.html But Wireshark always shows the decimal place for latitude and longi

Re: [Wireshark-dev] Building wireshark-0.99.6 problems on Linux

2007-07-31 Thread Radek Vokál
Fabrizio Bertocci wrote: > [3] On RedHat Enterprise 3, CentOS 3, and RedHat 9 the build fails > because the file: > gtk/export-object.c > uses some functions that are available only on GTK 2.4 and above. > > The correct fix is to #ifdef those sections to use the new API (GTK > 2.4>) only if gtk+2.

Re: [Wireshark-dev] Display Filter Macros of currently selected packet fields?

2007-07-31 Thread Luis EG Ontanon
No, It does not *select* the incoming packets, it leaves the last selected packet (frame 1 stays selected if none is selected). cf_select_packet() needs user-interaction to get invoked (either a mouse click or using the arrows) so it does not pose a heavy load (unless the user can click or type at

Re: [Wireshark-dev] how to add a dissector to an existing installationof wireshark

2007-07-31 Thread Stratemeier, Frank
Hi Michael! It is possible to distribute the plugin. Have a look at http://wiki.wireshark.org/Development/CommonProblems in the last section ;). Have fun! Frank -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Michael Jakobs Gesendet: Dienstag,

[Wireshark-dev] how to add a dissector to an existing installation of wireshark

2007-07-31 Thread Michael Jakobs
Hello at all! I have written a dissector under Windows, everything is working fine so far. I can share my dissector with a setup file, I have created. But if someone has an existing Wireshark Installation, is it possible just include the DLL as an plugin? I tried to copy my DLL to the plugin fol

Re: [Wireshark-dev] Display Filter Macros of currently selected packet fields?

2007-07-31 Thread Ulf Lamping
Luis EG Ontanon schrieb: > Committed revision 22427. > > When a packet is selected, it creates a cache (hash table) of all the > usable fields (FT_NONE and FT_PROTO are not, some of those had no > value and crashed so I just avoided them) marking duplicates as > unusable, if a (user defined) macr