[Wireshark-dev] query regarding wimax r1 interface code

2007-08-21 Thread Amit Paliwal
Hi Everyone, I was going through the code of R1 interface but i am finding it hard to get a cryatal clear picture of how it works. Can anyone please explain with example, like say we receive RNG_REQ Message than which functions are called. Like first of all dissect_wimax() will be called and

Re: [Wireshark-dev] OS X and Win32 buildbots unhappy with mpeg.c

2007-08-21 Thread Guy Harris
On Aug 21, 2007, at 8:34 PM, Maynard, Chris wrote: > There is still a problem compiling packet-mpeg-pes.c. Similar code, same problem, same fix checked in. ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/list

Re: [Wireshark-dev] OS X and Win32 buildbots unhappy with mpeg.c

2007-08-21 Thread Maynard, Chris
There is still a problem compiling packet-mpeg-pes.c. - Chris P.S. Here's the relevant output (at revision 22580): packet-mpeg-pes-template.c(138) : error C2220: warning treated as error - no obj ect file generated packet-mpeg-pes-template.c(138) : warning C4244: 'initializing' : conversion fro m

Re: [Wireshark-dev] OS X and Win32 buildbots unhappy with mpeg.c

2007-08-21 Thread Guy Harris
I've checked in a change that should fix this. A couple of rules for developers: 1) If you're doing 64-bit arithmetic, and assigning the result to a 32-bit quantity: 1) make sure that either the result will always fit in 32 bits, you check for results that don't fit

[Wireshark-dev] OS X and Win32 buildbots unhappy with mpeg.c

2007-08-21 Thread Ulf Lamping
___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

Re: [Wireshark-dev] [Fwd: [Wireshark-bugs] [Bug 1741] New: Privilege separation patch]

2007-08-21 Thread Gerald Combs
Joerg Mayer wrote: > I don't mind the message (see above) but I don't like the forced drop > of privs. I've modified the proposed patch to simply warn the user instead of dropping privs forcefully. ___ Wireshark-dev mailing list Wireshark-dev@wireshark.

[Wireshark-dev] review_for_checkin requested: [Bug 1741] Privilege separation patch

2007-08-21 Thread bugzilla-request-daemon
Gerald Combs <[EMAIL PROTECTED]> has asked for review_for_checkin: Bug 1741: Privilege separation patch http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1741 --- Additional Comments from Gerald Combs <[EMAIL PROTECTED]> As Joerg suggested, simply nudge the user and point them to better secu

Re: [Wireshark-dev] Memory leak

2007-08-21 Thread Jeff Morriss
Didier wrote: > On Thu, 19 Jul 2007 14:16:49 -0400, Jeff Morriss wrote >> Didier wrote: >>> Hi, >>> >>> 1) It seems that since some glib 2.0 version g_mem_chunk_destroy doesn't >>> free >> The docs certainly seem to indicate that the memory should actually >> be freed: >> >> http://www.gtk.org/api/

Re: [Wireshark-dev] JXTA dissector memory leak?

2007-08-21 Thread Jeff Morriss
Andrej Mikus wrote: > On Wed, 28.Mar.07 16:41:59 -0700, Stephen Fisher wrote: >> The dissector file packet-jxta.c has a comment saying that an allocation >> is a memory leak: >> >> if (NULL != found_addr) { >> found_addr->type = AT_URI; >> found_addr->len = strlen(*current_token);

[Wireshark-dev] review_for_checkin granted: [Bug 1722] TCP reassembly missing payload of FIN packet, when DESEGMENT_UNTIL_FIN is set

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff <[EMAIL PROTECTED]> has granted yin sun <[EMAIL PROTECTED]>'s request for review_for_checkin: Bug 1722: TCP reassembly missing payload of FIN packet, when DESEGMENT_UNTIL_FIN is set http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1722 --- Additional Comments from Richar

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Hi Jaap, I got the audio working. Thanx so much for spear heading the Unistim decoder! -John ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

[Wireshark-dev] review_for_checkin granted: [Bug 1753] mpeg: Further improvements to the MPEG decoder

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff <[EMAIL PROTECTED]> has granted Shaun Jackman <[EMAIL PROTECTED]>'s request for review_for_checkin: Bug 1753: mpeg: Further improvements to the MPEG decoder http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1753 --- Additional Comments from Richard van der Hoff <[EMAIL PR

[Wireshark-dev] review_for_checkin granted: [Bug 1724] [PATCH] packet-bootp.c: enhancement to decode DHCP option 249

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff <[EMAIL PROTECTED]> has granted Francois-Xavier Le Bail <[EMAIL PROTECTED]>'s request for review_for_checkin: Bug 1724: [PATCH] packet-bootp.c: enhancement to decode DHCP option 249 http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1724 --- Additional Comments from Richar

[Wireshark-dev] review_for_checkin denied: [Bug 1723] Enhancement of text2cap for parsing flexibility

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff <[EMAIL PROTECTED]> has denied Jack Yu <[EMAIL PROTECTED]>'s request for review_for_checkin: Bug 1723: Enhancement of text2cap for parsing flexibility http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1723 ___ Wireshark-dev mailing l

[Wireshark-dev] review_for_checkin denied: [Bug 1723] Enhancement of text2cap for parsing flexibility

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff <[EMAIL PROTECTED]> has denied Jack Yu <[EMAIL PROTECTED]>'s request for review_for_checkin: Bug 1723: Enhancement of text2cap for parsing flexibility http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1723 ___ Wireshark-dev mailing l

[Wireshark-dev] review_for_checkin granted: [Bug 1518] Bad g_asser in color_filter for coloring rules edition

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff <[EMAIL PROTECTED]> has granted Jaap Keuter <[EMAIL PROTECTED]>'s request for review_for_checkin: Bug 1518: Bad g_asser in color_filter for coloring rules edition http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1518 --- Additional Comments from Richard van der Hoff <[EM

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Hi Jaap, Sorry to be kind of dense but... How do I perform RTP analysis with Wireshark so that I can: - How do I get all streams? - How do I select a stream(s) of interest? - How do I save the stream to an .au file? Thanx! John ___ Wireshar

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Luis EG Ontanon
But for sccp and h248 (for which the dissector keeps "call information" on its own) other protocols are managed by a tap, mgcp is a plugin protocol but still it has its voip calls interface if the tap is found it gets tapped else it doesn't. BTW. is the code that ugly/rarely-used for this to be a

[Wireshark-dev] review_for_checkin granted: [Bug 1698] Desegment Chunked HTTP Bodies

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff <[EMAIL PROTECTED]> has granted Mike Duigou <[EMAIL PROTECTED]>'s request for review_for_checkin: Bug 1698: Desegment Chunked HTTP Bodies http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1698 --- Additional Comments from Richard van der Hoff <[EMAIL PROTECTED]> Applied a

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, Then it the unistim dissector should feed the voip call tap with relevant info. I'm not sure this can be done from a plugin. You can always get the audio by means of RTP analysis. Get all streams, pick out the stream(s) of interest, save it to an .au file and play that. Sure, the voip call

[Wireshark-dev] review_for_checkin denied: [Bug 1606] Improve preferences for Netflow

2007-08-21 Thread bugzilla-request-daemon
Richard van der Hoff <[EMAIL PROTECTED]> has denied Andrew Feren <[EMAIL PROTECTED]>'s request for review_for_checkin: Bug 1606: Improve preferences for Netflow http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1606 ___ Wireshark-dev mailing list Wiresha

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Thanx everyone - the new build works great for decoding UNISTIM! Is there anyway to get the UNISTIM calls to show up under STATISTICS - VOIP CALLS so that I can play back the audio? OR is there another way to play back the Audio for UNISTIM calls? Thanx again! -John

Re: [Wireshark-dev] warning while running wireshark

2007-08-21 Thread Richard van der Hoff
Toeung, Chanthy wrote: > I got it. Please could you ask questions like this in the user list in future? ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Richard van der Hoff
J P, Sorry I don't have anything useful to add to your question, but do you think you could fix your posts to have correct In-Reply-To or References headers, such that you don't break the threading? Normally I'd post a link about fixing your exchange server, but it looks like you're using gmai

Re: [Wireshark-dev] First frame not in IO Graphs?

2007-08-21 Thread Luis EG Ontanon
"IO graphs ignore the first frame" looks much more like something in a bug report slogan than a feature description in the release notes. On 8/21/07, Stig Bjørlykke <[EMAIL PROTECTED]> wrote: > Hi. > > I observe that the first frame in a capture is not showing in the IO > Graphs. > Is this a "des

[Wireshark-dev] First frame not in IO Graphs?

2007-08-21 Thread Stig Bjørlykke
Hi. I observe that the first frame in a capture is not showing in the IO Graphs. Is this a "design feature" or a bug? -- Stig Bjørlykke ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-

[Wireshark-dev] Win2000 Error: wireshark.exe is not a valid Win32 application

2007-08-21 Thread Greg Bell
This is what I get when I try and run my wireshark build on Windows 2000. It works fine on Windows XP and 2003. My build is based off the 0.99.6 release source. One thing I noticed was that when trying to install the Visual C++ 2005 Redistributable (during the Wireshark install), it gave a "Erro

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, I can tell you that it's decoded fine. A call to 2600 and a few seconds RTP with you blowing in the mic twice ;) Just give the buildbot a little time to spit out the build of revision 22563. Thanx, Jaap J P wrote: > Hi, > > Attached is a capture file for a call made in our lab. > > -Jo

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, Ahh crap. Installers, you think you've got them all. Not so :/ Thanx, Jaap Guy Harris wrote: > J P wrote: > >> I do not see a UNISTIM plug-in in the C:\Program >> Files\Wireshark\plugins\0.99.7-SVN-22562 directory or an updated >> RUDP.DLL file. >> >> Does one have to do something speci

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Guy Harris
J P wrote: > I do not see a UNISTIM plug-in in the C:\Program > Files\Wireshark\plugins\0.99.7-SVN-22562 directory or an updated > RUDP.DLL file. > > Does one have to do something specific to enable or download the UNISTIM > decoder? > > I am running Version 0.99.7-SVN-22562 (SVN Rev 22562)

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jeff Morriss
Good reason to convert it to a regular dissector! ;-) (Sorry, couldn't help it...) Luis EG Ontanon wrote: > It's missing from packaging/nsis/wireshark.nsi so it's not being > included in the installer. > > On 8/21/07, J P <[EMAIL PROTECTED]> wrote: >> Hi, >> >> I do not see a UNISTIM plug-in in

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Luis EG Ontanon
It's missing from packaging/nsis/wireshark.nsi so it's not being included in the installer. On 8/21/07, J P <[EMAIL PROTECTED]> wrote: > Hi, > > I do not see a UNISTIM plug-in in the C:\Program > Files\Wireshark\plugins\0.99.7-SVN-22562 directory or an > updated RUDP.DLL file. > > Does one have to

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Hi, I do not see a UNISTIM plug-in in the C:\Program Files\Wireshark\plugins\0.99.7-SVN-22562 directory or an updated RUDP.DLLfile. Does one have to do something specific to enable or download the UNISTIM decoder? I am running Version 0.99.7-SVN-22562 (SVN Rev 22562) Thanx, John __

[Wireshark-dev] Cairo errors when running Wireshark on an embedded system

2007-08-21 Thread Fulko Hew
The good news is I no longer have my previous complaint about a misconfigured fonts.conf. (When I build the X client libraries it appears that fontconfig did not get built properly. When I explicitly rebuilt it manually, that resolved the issue.) Today's problem is while invoking Wireshark, I no

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, A decode is fine, but a capture file would be better. Thanx, Jaap J P wrote: > Hi Jaap, > > Thanx for the speedy response. > > Here is the decode of a Unistim Packet from a call I made: > > Frame 31 (164 bytes on wire, 164 bytes captured) > Ethernet II, Src: Cisco_01:54:01 (00:0

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Newton, Don
Can you attach a pcap file? Don Newton From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of J P Sent: Tuesday, August 21, 2007 12:32 PM To: wireshark-dev@wireshark.org Subject: Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder Hi

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Hi Jaap, Thanx for the speedy response. Here is the decode of a Unistim Packet from a call I made: Frame 31 (164 bytes on wire, 164 bytes captured) Ethernet II, Src: Cisco_01:54:01 (00:05:32:01:54:01), Dst: Nortel_e4:62:ab (00:15:9b:e4:62:ab) Internet Protocol, Src: 204.83.231.69 (204.83.231.69)

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread Jaap Keuter
Hi, The beauty of subversion is that any change to the repository simply increments the revision number. If you know the tree to take from you can be assured that everything is in there. The buildbot builds from /trunk and that's where all the development is happening, so yes the build from re

Re: [Wireshark-dev] warning while running wireshark

2007-08-21 Thread Toeung, Chanthy
I got it. Thank all, Chanthy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Joerg Mayer Sent: Tuesday, August 21, 2007 11:33 AM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] warning while running wireshark On Tue, Aug 21, 2007 at

Re: [Wireshark-dev] warning while running wireshark

2007-08-21 Thread Joerg Mayer
On Tue, Aug 21, 2007 at 11:27:49AM -0400, Toeung, Chanthy wrote: > 03:41:29 Warn /home/toeung/.wireshark/preferences line 2441: No such > preference "user_dlt_d.trailer_proto" (applying your preferences once should > remove this warning) >

Re: [Wireshark-dev] warning while running wireshark

2007-08-21 Thread Graham Bloice
Toeung, Chanthy wrote: > Hi, > > I'm building a plugin IPMB for Wireshark. All work well except when i start > Wireshark i get a warning message as follow: > > your preferences once should remove this warning) > 03:41:29 Warn /home/toeung/.wireshark/preferences line 2377: No such > pref

[Wireshark-dev] warning while running wireshark

2007-08-21 Thread Toeung, Chanthy
Hi, I'm building a plugin IPMB for Wireshark. All work well except when i start Wireshark i get a warning message as follow: your preferences once should remove this warning) 03:41:29 Warn /home/toeung/.wireshark/preferences line 2377: No such preference "user_dlt_b.header_proto" (app

Re: [Wireshark-dev] Network Instruments Observer - Unistim Decoder

2007-08-21 Thread J P
Hi Jaap, I went to http://www.wireshark.org/download/automated/win32/ but could only find build 22562. I am not sure exactly how patches are aggregated in the developmen releases. Does 22562 include your Unistim patch? The decodes that I get from a VoIP call do not seem to inidicate Unistim but

Re: [Wireshark-dev] save payload from RTP trace

2007-08-21 Thread Abhik Sarkar
Hmmm... it seems that the /gtk/rtp* file might also be of interest to you, especially rtp_player.c. Best regards, Abhik On 8/21/07, Abhik Sarkar <[EMAIL PROTECTED]> wrote: > The following links should help you get started... > http://www.wireshark.org/docs/wsdg_html_chunked/ChDissectReassemble.ht

Re: [Wireshark-dev] save payload from RTP trace

2007-08-21 Thread Abhik Sarkar
The following links should help you get started... http://www.wireshark.org/docs/wsdg_html_chunked/ChDissectReassemble.html http://www.wireshark.org/docs/wsdg_html_chunked/ChDissectConversation.html Best regards, Abhik. On 8/21/07, Илья Куделин <[EMAIL PROTECTED]> wrote: > Hi, sorry for my englis

[Wireshark-dev] save payload from RTP trace

2007-08-21 Thread Илья Куделин
Hi, sorry for my english :) I am writing plugin for wireshark, which will be decode payload from RTP-trace. payload was encoded using G.729. in this moment i can save payload from only one packet(20-30bytes decode to 20-30ms). Please, can anybody tell me how i can scan all packages in trace. i thin