Re: [Wireshark-dev] Teamspeak2 Dissector

2008-06-12 Thread Jaap Keuter
Hi, You caught us in a busy time, working towards 1.0.0. I've looked at it and added some comments. Lets keep working on it in bugzilla. Thanx, Jaap Brooss wrote: > Hi wireshark-dev, > > A few months ago I completed work on a TeamSpeak2 dissector and posted > it on the bug tracker (2373). >

[Wireshark-dev] buildbot failure in Wireshark (development) on Ubuntu-7.10-x86-64

2008-06-12 Thread buildbot-no-reply
The Buildbot has detected a new failure of Ubuntu-7.10-x86-64 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/Ubuntu-7.10-x86-64/builds/0 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: ubuntu-7.10-x86 Build

Re: [Wireshark-dev] wireshark 1.0.1?

2008-06-12 Thread Jaap Keuter
Andrew Hood wrote: > Jaap Keuter wrote: >> Hi, >> >> That is a good question. As you may already have seen we're collecting a lot >> of bugfixes in the roadmap and eventually roll them into 1.0.1. When that >> will >> be is a little hard to predict. Currently there are some infrastructure >> pr

Re: [Wireshark-dev] Need help on wireshark plugin library path setting and open (on hardware not pc

2008-06-12 Thread yenan
Hi, Jaap: Thank you very much! I already searched the configure options, there is a --with-plugin[=DIR] option, but same as --prefix option, it will look for an absolute path, is it possible set it to a relative path? like anything similar to ../../PLUNIN_DIR ? Thank you millions! Very appre

Re: [Wireshark-dev] wireshark 1.0.1?

2008-06-12 Thread Andrew Hood
Jaap Keuter wrote: > Hi, > > That is a good question. As you may already have seen we're collecting a lot > of bugfixes in the roadmap and eventually roll them into 1.0.1. When that > will > be is a little hard to predict. Currently there are some infrastructure > problems which have to be sor

[Wireshark-dev] LUA development changing column headers

2008-06-12 Thread Rowswell, Brent
Over the past few weeks I've been trying to make a LUA script to parse out my header information, open up the packet and display the necessary data in a various tree structure. So far all of that has been done well enough, but I find that the packets that I have dissected come maybe once every 300

[Wireshark-dev] Teamspeak2 Dissector

2008-06-12 Thread Brooss
Hi wireshark-dev, A few months ago I completed work on a TeamSpeak2 dissector and posted it on the bug tracker (2373). https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2373 No one seems to have had a chance to review it yet but I would appreciate some feedback on the chances of it getting ch

Re: [Wireshark-dev] Failure to dissect long SASL wrapped LDAP response

2008-06-12 Thread Kaul
Oh, that may explain it (from packet-ldap.c) marked with bold/italic/underline: */* check for a SASL header, i.e. assume it is SASL if * 1, first four bytes (SASL length) is an integer *with a value that must be <64k and >2 *(>2 to fight false positives, 0x00

Re: [Wireshark-dev] Failure to dissect long SASL wrapped LDAP response

2008-06-12 Thread Jaap Keuter
Hi, Can you test the last buildbot build? You can find it here: http://www.wireshark.org/download/automated/win32/ Thanx, Jaap Kaul wrote: > Wireshark 1.0.0, win32, fails to de-segment (TCP level?) and properly > dissect a pretty long (229959 bytes entire conversation) SASL wrapped > LDAP res

[Wireshark-dev] Failure to dissect long SASL wrapped LDAP response

2008-06-12 Thread Kaul
Wireshark 1.0.0, win32, fails to de-segment (TCP level?) and properly dissect a pretty long (229959 bytes entire conversation) SASL wrapped LDAP response. Regretfully, I cannot share the capture, but the first packet that is not desgemented or dissected in any way (just shows as TCP payload) is (pa

Re: [Wireshark-dev] Need help on wireshark plugin library path setting and open (on hardware not pc box)

2008-06-12 Thread Jaap Keuter
Hi, Run configure with the '-help' option. That shows all the options you can pass to the script to match the build to your target. Thanx, Jaap yenan wrote: > Hi, folks, need help here! > > I am tasked to integrate tshark to hardware, therefore we can capture > and debug packets internally. W

Re: [Wireshark-dev] wireshark 1.0.1?

2008-06-12 Thread Jaap Keuter
Hi, That is a good question. As you may already have seen we're collecting a lot of bugfixes in the roadmap and eventually roll them into 1.0.1. When that will be is a little hard to predict. Currently there are some infrastructure problems which have to be sorted first. Then there's an assessm

[Wireshark-dev] Need help on wireshark plugin library path setting and open (on hardware not pc box)

2008-06-12 Thread yenan
Hi, folks, need help here! I am tasked to integrate tshark to hardware, therefore we can capture and debug packets internally. We build tshark as a 3rd party tool through image combined with other tools, when installing this image to hardware, a path like $IMAGE will add in front of wireshar

[Wireshark-dev] wireshark 1.0.1?

2008-06-12 Thread valentin . ecker
Hi there! A short question: Do you have any plans to make a new release in the near future? thx Valentin___ Wireshark-dev mailing list Wireshark-dev@wireshark.org https://wireshark.org/mailman/listinfo/wireshark-dev

Re: [Wireshark-dev] problem to register own protoco...

2008-06-12 Thread Abhik Sarkar
Sub-dissectors can't be added against protocol fields, but against dissector tables. H225 registers the following tables: nsp_object_dissector_table = register_dissector_table("h225.nsp.object", "H.225 NonStandardParameter (object)", FT_STRING, BASE_NONE); nsp_h221_dissector_table = register_di

Re: [Wireshark-dev] SMTP: Extracting parametrs

2008-06-12 Thread Abhik Sarkar
Dear Goitom, My understanding is that SMTP (http://www.ietf.org/rfc/rfc2821.txt) is only the envelope and the fields you are looking for are in IMF (http://www.ietf.org/rfc/rfc2822.txt). Also see, http://wiki.wireshark.org/IMF. So, in general, if I am looking for these fields in particular, I wou

Re: [Wireshark-dev] Start Dissection from an upper layer?

2008-06-12 Thread Guillaume Bienkowski
Eloy Paris a écrit : > > Give something like this a try (this code snippet assumes all the > libwireshark initializations have been done already): > > [snip] > > > fdata->lnk_t = wtap_pcap_encap_to_wtap_encap(DLT_RAW); > [snip] > > > Let us know how it goes. > > Cheers, > > Eloy Paris.- > nete

Re: [Wireshark-dev] SMTP: Extracting parametrs

2008-06-12 Thread goitom kahsay
Dear Abhik, Thank you very much for your help. But, do you think IMF packet always exist in all smtp conversations? Because i need to extract these parameters from all SMTP email communications. Thank you in advance. with best regards, On Wed, Jun 11, 2008 at 11:19 PM, Abhik Sarkar