Re: [Wireshark-dev] Compilation error in asn.1 file

2008-01-03 Thread taraniteja.vishwanatha
Hi Yin, I have checked the gsmmap, ansi_map and inap ( TC users of TCAP).I have written my implementation in a separate mail. I would be happy if you can check and give me some suggestions. BR, Tarani From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] O

Re: [Wireshark-dev] Compilation error in asn.1 file

2008-01-03 Thread taraniteja.vishwanatha
Hi Anders, I am sorry , I don't have any trace of the protocol. It s still in the development phase. That is the reason we are facing so many issues. We have gone through inap , gsmmap and ansi_map code and implemented in the following manner: static void dissect_xxx(tvbuff_t *tvb, packet_info

Re: [Wireshark-dev] How to get Destination IP in plugin

2008-01-03 Thread Guy Harris
On Jan 3, 2008, at 4:08 PM, Diaconou, Alex wrote: > What about extracting the column info? That's not a supported feature; the data in the address columns is generated from pinfo->{dl_src,net_src,src} and pinfo->{dl_dst,net_dst, dst}. > Can I get the IP address as a > string from the SOURCe

Re: [Wireshark-dev] How to get Destination IP in plugin

2008-01-03 Thread Guy Harris
On Jan 3, 2008, at 3:05 PM, Diaconou, Alex wrote: > The data field of the pinfo->src address structure ( (pinfo- > >src).data ) > contains gibberish - no IP address. What could be the cause of this? What are the bytes pointed to by the pointer in that data field? It should point to 4 bytes

Re: [Wireshark-dev] How to get Destination IP in plugin

2008-01-03 Thread Diaconou, Alex
What about extracting the column info? Can I get the IP address as a string from the SOURCe or DESTINATION column of the packet(s) in question? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris Sent: Thursday, January 03, 2008 10:45 AM To: Develo

Re: [Wireshark-dev] Timing information in Wireshark follow tcp stream

2008-01-03 Thread Sake Blok
On Thy, Jan 03, 2008 at 04:23:43PM +0100, Wilfried Goesgens wrote: > > I was wondering whether there is a way to have the 'follow tcp trace' > time annotated? At the moment it is not possible to show time annotations in the 'follow tcp stream' window. It just shows you the data that was transfe

Re: [Wireshark-dev] How to get Destination IP in plugin

2008-01-03 Thread Diaconou, Alex
It is a dissector. The data field of the pinfo->src address structure ( (pinfo->src).data ) contains gibberish - no IP address. What could be the cause of this? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris Sent: Thursday, January 03, 2008 1

Re: [Wireshark-dev] wireshark-0.99.7 build stopped under HP-UX 11.11

2008-01-03 Thread Stephen Fisher
On Thu, Jan 03, 2008 at 01:37:17PM +0100, Falk Hayn wrote: > the build of wireshark-0.99.7 stopped under HP-UX 11.11 > > Root cause: > ~~~ > Within privileges.c, the right API calls will be selected Thanks for your report! Would you mind going to http://bugs.wireshark.org and opening

Re: [Wireshark-dev] wireshark 0.99.7 crash on MacOS X 10.5 (Leopard)

2008-01-03 Thread Andreas Fink
adns-1.3 No. atk-1.20.0 1.9.2 cairo-1.4.12 Same. gettext-0.17 Same. glib-2.15.0 2.14.4 gtk+-2.12.3 Same. jpeg-6b No. libpng-1.2.24 No, there is already a version in /usr/X11/lib/ Which is apparently 1.2.8 lua-5.1.2 No. pango-1.19.0 1.18.0 pcre-7.4 No. pkg-config-

Re: [Wireshark-dev] wireshark 0.99.7 crash on MacOS X 10.5 (Leopard)

2008-01-03 Thread Michael Tuexen
On Jan 3, 2008, at 9:54 PM, Andreas Fink wrote: >>> I was able to successfully build wireshark with the latest gtk/glib stuff. Everything works fine except for the stock icons... >>> >>> I dont know which Icons you refer to but on my Mac i'm not missing >>> any... >> Hmmm. The New,

Re: [Wireshark-dev] Compilation error in asn.1 file

2008-01-03 Thread yin sun
Hi Tarani, If I understand correctly you need to check gsmmap for the implementation. there is opcode variable defined in the template c code there is setting and getting example in gsmmap.cnf /Yin On Jan 3, 2008 5:50 AM, <[EMAIL PROTECTED]> wrote: > > Hi Anders, > > I was able to compile my asn

Re: [Wireshark-dev] wireshark 0.99.7 crash on MacOS X 10.5 (Leopard)

2008-01-03 Thread Andreas Fink
>> >>> I was able to successfully build wireshark with >>> the latest gtk/glib stuff. Everything works fine >>> except for the stock icons... >> >> I dont know which Icons you refer to but on my Mac i'm not missing >> any... > Hmmm. The New, Open, and so on icons in the toolbar. I used > gtk-2.12.3

Re: [Wireshark-dev] wireshark 0.99.7 crash on MacOS X 10.5 (Leopard)

2008-01-03 Thread Michael Tuexen
On Jan 3, 2008, at 9:01 PM, Andreas Fink wrote: > > On 03.01.2008, at 20:40, Michael Tuexen wrote: > >> Hi Andreas, >> >> did up upgrade to >> http://trac.macosforge.org/projects/xquartz >> which fixes a number of bugs and especially some >> which show up when using wireshark? > > No. I would have

Re: [Wireshark-dev] wireshark 0.99.7 crash on MacOS X 10.5 (Leopard)

2008-01-03 Thread Andreas Fink
On 03.01.2008, at 21:11, Guy Harris wrote:Andreas Fink wrote:ok. So I can safely blame Leopard of bringing me a broken X11.app... ;-)Yes.  The magic number is 5147896, but as I filed it you might not be able to see it.by the way I think it happens when it starts scrolling lines.I also noted that it

Re: [Wireshark-dev] wireshark 0.99.7 crash on MacOS X 10.5 (Leopard)

2008-01-03 Thread Guy Harris
Andreas Fink wrote: > ok. So I can safely blame Leopard of bringing me a broken X11.app... ;-) Yes. The magic number is 5147896, but as I filed it you might not be able to see it. > by the way I think it happens when it starts scrolling lines. > I also noted that it happens also with Monitor s

Re: [Wireshark-dev] wireshark 0.99.7 crash on MacOS X 10.5 (Leopard)

2008-01-03 Thread Andreas Fink
On 03.01.2008, at 20:40, Michael Tuexen wrote: Hi Andreas, did up upgrade to http://trac.macosforge.org/projects/xquartz which fixes a number of bugs and especially some which show up when using wireshark? No. I would have expected Leopard to have a bug free X11.app (I'm living in a perfec

Re: [Wireshark-dev] wireshark 0.99.7 crash on MacOS X 10.5 (Leopard)

2008-01-03 Thread Andreas Fink
On 03.01.2008, at 20:44, Guy Harris wrote: > Andreas Fink wrote: > >> I'm trying to rebuild wireshark for MacOS X 10.5 (Leopard) with the >> new >> X11 engine (instead of the old XFree86, Leopard uses XFree.org's >> implementation if I'm not mistaken). > > X.org rather than XFree.org, but, yes,

Re: [Wireshark-dev] wireshark 0.99.7 crash on MacOS X 10.5 (Leopard)

2008-01-03 Thread Guy Harris
Andreas Fink wrote: > I'm trying to rebuild wireshark for MacOS X 10.5 (Leopard) with the new > X11 engine (instead of the old XFree86, Leopard uses XFree.org's > implementation if I'm not mistaken). X.org rather than XFree.org, but, yes, Leopard's X server is X.org-based rather than XFree86-b

Re: [Wireshark-dev] wireshark 0.99.7 crash on MacOS X 10.5 (Leopard)

2008-01-03 Thread Michael Tuexen
Hi Andreas, did up upgrade to http://trac.macosforge.org/projects/xquartz which fixes a number of bugs and especially some which show up when using wireshark? I was able to successfully build wireshark with the latest gtk/glib stuff. Everything works fine except for the stock icons... Best regar

[Wireshark-dev] wireshark 0.99.7 crash on MacOS X 10.5 (Leopard)

2008-01-03 Thread Andreas Fink
Hi there, I'm trying to rebuild wireshark for MacOS X 10.5 (Leopard) with the new X11 engine (instead of the old XFree86, Leopard uses XFree.org's implementation if I'm not mistaken). However I'm running into crashes saying: intelix:sources afink$ wireshark --sync The program 'wireshark' r

Re: [Wireshark-dev] How to get Destination IP in plugin

2008-01-03 Thread Guy Harris
Diaconou, Alex wrote: > I am developing a plugin for test purposes on our system, and I need to > extract the destination IP address of the packets so I know how to parse > the data on top of a TCP packet. So is this a plugin dissector or a plugin tap? If it's a dissector, then: > Is there an

[Wireshark-dev] How to get Destination IP in plugin

2008-01-03 Thread Diaconou, Alex
I am developing a plugin for test purposes on our system, and I need to extract the destination IP address of the packets so I know how to parse the data on top of a TCP packet. Is there an API or other method of obtaining the IP address for comparison? I should note that I'm developing in a wind

[Wireshark-dev] Timing information in Wireshark follow tcp stream

2008-01-03 Thread Wilfried Goesgens
Hy everybody...I was wondering whether there is a way to have the 'follow tcp trace' time annotated?So one can easily see, which answer times a specific conversation has? Wilfried Goesgens  ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org ht

[Wireshark-dev] wireshark-0.99.7 build stopped under HP-UX 11.11

2008-01-03 Thread Falk Hayn
Dear Ladies and Sirs, the build of wireshark-0.99.7 stopped under HP-UX 11.11 Root cause: ~~~ Within privileges.c, the right API calls will be selected #ifdef HAVE_SETRESGID setresgid(rgid, rgid, rgid); #else setgid(rgid); setegid(rgid);

Re: [Wireshark-dev] crash with Preference in Plugin

2008-01-03 Thread Jeff Morriss
Did you recompile your plugin against the 0.99.7 source code? IIRC the column numbering changed between 0.99.6 and 0.99.7 so if you don't recompile you get this kind of problem. khushbu thakkar wrote: > Hi Jaap, > > After a long R&D i could fix the problem of crashing. And the reason was >

Re: [Wireshark-dev] where guint is defined in FreeBSD

2008-01-03 Thread Abhik Sarkar
guint comes from glib (from glib/gtypes.h via glib.h> On Jan 3, 2008 4:46 PM, Mayank Jain <[EMAIL PROTECTED]> wrote: > Its recommended to use guint instead of u_int > > > Don't use "uchar", "u_char", "ushort", "u_short", "uint", "u_int", > "ulong", "u_long" or "boolean"; they aren't defined on all

[Wireshark-dev] where guint is defined in FreeBSD

2008-01-03 Thread Mayank Jain
Its recommended to use guint instead of u_int Don't use "uchar", "u_char", "ushort", "u_short", "uint", "u_int", "ulong", "u_long" or "boolean"; they aren't defined on all platforms. If you want an 8-bit unsigned quantity, use "guint8"; if you want an 8-bit character value with the 8th bit not in

Re: [Wireshark-dev] Compilation error in asn.1 file

2008-01-03 Thread Anders Broman
Hi, - Have you got a trace with your protocol? - Is it ANSI TCAP? If you look at the trace with Wireshark the trace is decoded to the ANSI TCAP layer including operation code - right? If so you need some code in the ANSI TCAP dissector to call your dissector How that should be done depends on the c

Re: [Wireshark-dev] Compilation error in asn.1 file

2008-01-03 Thread taraniteja.vishwanatha
Hi Anders, I was able to compile my asn successfully. There are three different opcodes mentioned for three different operations. Each operation contains an argument / parameter part and a result. As you have rightly said, I have to call my Argument methods ( dissect_xxxArg) and result methods

Re: [Wireshark-dev] code coverage measurement for a dissector?

2008-01-03 Thread Stig Bjørlykke
On 3. jan.. 2008, at 08.54, Németh Márton wrote: > What is your Wireshark version? Latest SVN. I found the *.gcno files in epan/dissectors/.libs/, so doing a "gcov - o .libs/libcleandissectors_la-packet-dmp.o packet-dmp.c" in epan/ dissectors creates a coverage output for my dissector. --