Re: [Wireshark-dev] Can't see my protocol in "Decode As ..." menu

2008-01-22 Thread Anders Broman
-Ursprungligt meddelande- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Glenn Shirley Skickat: den 23 januari 2008 04:01 Till: 'Developer support list for Wireshark' Ämne: Re: [Wireshark-dev] Can't see my protocol in "Decode As ..." menu Hi Guy, > On Jan 22, 2008, at 6:36 PM, Gl

Re: [Wireshark-dev] Can't see my protocol in "Decode As ..." menu

2008-01-22 Thread Glenn Shirley
Hi Guy, > On Jan 22, 2008, at 6:36 PM, Glenn Shirley wrote: > > > Hi Anders (et. al.), > > > > My protocol is based on an RTP payload type (e.g. 100) so my > > dissector_add is as follows: > > ... > > > As mentioned before this was all working on a windows build > but that > > was a lo

Re: [Wireshark-dev] Can't see my protocol in "Decode As ..." menu

2008-01-22 Thread Glenn Shirley
Ok, looks like my build is actually fine - if I disable all protocols except eth, ip, udp, rtp and my protocol it works fine. I'm guessing because the RTP payload type I expect is defined elsewhere (its one of the dynamic payload types) Wireshark gets confused as to which dissector to use. S

Re: [Wireshark-dev] Can't see my protocol in "Decode As ..." menu

2008-01-22 Thread Guy Harris
On Jan 22, 2008, at 6:36 PM, Glenn Shirley wrote: > Hi Anders (et. al.), > > My protocol is based on an RTP payload type (e.g. 100) so my > dissector_add > is as follows: ... > As mentioned before this was all working on a windows build but that > was a > long time ago so I may have

Re: [Wireshark-dev] Can't see my protocol in "Decode As ..." menu

2008-01-22 Thread Glenn Shirley
Hi Anders (et. al.), My protocol is based on an RTP payload type (e.g. 100) so my dissector_add is as follows: --- static enum { RTP_PAYLOAD_TYPE_PIRP = 100 }; void proto_reg_handoff_pirp(void) { static gboolean initialised = FALSE; if (!initialised) { pi

[Wireshark-dev] Would anyone take a look at bug 2125?

2008-01-22 Thread 杨铭(Ming Yang)
Hi all, Sorry to bother you. But would anyone take a look at bug 2125? It seems to me that bugzilla is not as active as this mail list? ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

Re: [Wireshark-dev] New Dissector: LLRP

2008-01-22 Thread Poduska, Matt
Hello, I'm just checking on the status of this new dissector. If there's anything I can do to help the process let me know. I've just sync'd the patch with the latest SVN snapshot. Thanks, Matt Poduska -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jaap

Re: [Wireshark-dev] Can't see my protocol in "Decode As ..." menu

2008-01-22 Thread Anders Broman
Hi, How are your dissectors registered? dissector_add("udp.port",...)? If your packets are recognised as RTP you may wish to register the dissectors with the RTP dissector (see packet-h264.c). Regards Anders -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf O

Re: [Wireshark-dev] Problems in calling a message from RANAP dissector

2008-01-22 Thread Anders Broman
Hi, The principle is ok but you should probably use "dissect_ResetResource_PDU" and give it a new tvb with the RANAP data. Possibly causes of the decoding problem dissect_ranap_ResetResource() may expect offset in bits and return bit_offset. The data given to dissect_ranap_ResetResource() is not

[Wireshark-dev] Exporting TAP statistics at a regular interval

2008-01-22 Thread Andrew Whalen
Hello, I¹m looking for a way to export my TAP statistics at a regular interval to the file system. (Preferably in a well-defined file format) I¹d like to export the statistics every minute or every 5 minutes. Does anyone have any experience with this, or can anyone point me in the right direction?

[Wireshark-dev] Can't see my protocol in "Decode As ..." menu

2008-01-22 Thread Glenn Shirley
Hi all, I'm currently building Wireshark on CentOs 4 and trying to add in my own protocols. My build appears fine but when I run my newly built version of Wireshark I can see my protocols in the "Analyze | Enabled protocols" list but they aren't visible under the "Decode as" menu. My build on

Re: [Wireshark-dev] Trouble with building Wireshark on Win32

2008-01-22 Thread Graham Bloice
Gupta, Satya wrote: > >> Can you post the output of "nmake -f Makefile.nmake verify_tools". >> > > Graham, > > Thanks for your help. Here is the output for verify_tools > > Regards > > SG > > C:\Wireshark>nmake -f Makefile.nmake verify_tools > > Microsoft (R) Program Maintenanc

Re: [Wireshark-dev] Trouble with building Wireshark on Win32

2008-01-22 Thread Gupta, Satya
> Can you post the output of "nmake -f Makefile.nmake verify_tools". Graham, Thanks for your help. Here is the output for verify_tools Regards SG C:\Wireshark>nmake -f Makefile.nmake verify_tools Microsoft (R) Program Maintenance Utility Version 7.00.8882 Copyright (C) Microso

[Wireshark-dev] Problems in calling a message from RANAP dissector

2008-01-22 Thread taraniteja.vishwanatha
Hi , I have my test dissector , running over SUA , in TLV ( tag length value) format. In one of the messages, I want to add an existing RANAP ( asn.1 format) message along with the other parameters of my protocol. The coding of one of the messages in which I have called RANAP message goes like t

Re: [Wireshark-dev] pcap-ng support

2008-01-22 Thread Ulf Lamping
Gianluca Varenni schrieb: > I just uploaded a new version of the spec here > > http://www.winpcap.org/ntar/draft/PCAP-DumpFileFormat_ts.html > > I tried to spedify the timestamps better and renamed if_tsaccur into > if_tsresol. > > Let me know if you think it makes more sense. > Yes it does, ho

Re: [Wireshark-dev] Some fields output nothing, when using tshark with -T fields

2008-01-22 Thread Sake Blok
On Tue, Jan 22, 2008 at 09:39:54AM +0100, Nils wrote: > > Yes, the fields will be added to the fields struct, but when > > proto_tree_get_node_field_values() goes through the fields, it > > uses get_node_field_value() to get the actual value. This function > > returned NULL when a fields was of typ

Re: [Wireshark-dev] pcap-ng support

2008-01-22 Thread Guy Harris
Tyson Key wrote: > Hi, sorry to hijack the thread, but does anyone know if there will be a > link type code available for Bluetooth "Bluetooth" is too general a term to ask about. > in pcap-ng? The link-layer types for pcap-NG are the same as the link-layer types for libpcap; libpcap, and the

Re: [Wireshark-dev] Some fields output nothing, when using tshark with -T fields

2008-01-22 Thread Nils
> Yes, the fields will be added to the fields struct, but when > proto_tree_get_node_field_values() goes through the fields, it > uses get_node_field_value() to get the actual value. This function > returned NULL when a fields was of type FT_NONE. I committed a > patch that makes it return "1" inst