Re: [Wireshark-dev] Plugin crash

2008-06-20 Thread Matt Poduska
I believe I've found the problem. It was with a line like: { &hf_llrp_field_value_s8, { "Value", PROTO_NAME_LLRP ".field.s8value", FT_INT8, BASE_HEX, NULL, 0x00, "llrp field s8 value", HFILL }}, The problem appears to be that I've specified BASE_HEX along wi

[Wireshark-dev] buildbot failure in Wireshark (development) on Windows-XP-x86

2008-06-20 Thread buildbot-no-reply
The Buildbot has detected a new failure of Windows-XP-x86 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/Windows-XP-x86/builds/4470 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: windows-xp-x86 Build Reason

Re: [Wireshark-dev] wireshark 1.0.1?

2008-06-20 Thread Gerald Combs
It looks like the prerelease will have to be postponed until Monday (the 23rd). Gerald Combs wrote: > How about a prerelease of 1.0.1 and 1.1.0 this Friday (the 20th) followed by > final releases on the 27th or 30th? > > Jaap Keuter wrote: >> Hi, >> >> That is a good question. As you may already

Re: [Wireshark-dev] LUA development highlighting bytefield display with LUA

2008-06-20 Thread Rowswell, Brent
It seems to want the filter to be just the protofield name, so it lets me use stuff as a filter. The problem with that is the filter doesn't seem to be tied into the use of that proto, so while my dissector is grabbing the data out of the fields, when filtering by the protofield it doesn't like a

Re: [Wireshark-dev] Request/Response tracking with multiple responses

2008-06-20 Thread Martin Mathieson
On Fri, Jun 20, 2008 at 6:26 PM, Guy Harris <[EMAIL PROTECTED]> wrote: > Thomas Boehne wrote: > > I followed the README.request_response_tracking to add > > request/response tracking to a UDP based protocol, but the protocol > > sometimes sends multiple responses to a single request. Does anybody

Re: [Wireshark-dev] CVS dataset required

2008-06-20 Thread Aaron Turner
On Fri, Jun 20, 2008 at 9:37 AM, Guy Harris <[EMAIL PROTECTED]> wrote: > Eloy Paris wrote: > >> What do you mean by a "CVS dataset"? Is it a packet capture of the >> execution of a cvs command? If so I don't think you've come to the right >> place to ask for that since this mailing list is to discu

Re: [Wireshark-dev] Request/Response tracking with multiple responses

2008-06-20 Thread Guy Harris
Thomas Boehne wrote: > I followed the README.request_response_tracking to add > request/response tracking to a UDP based protocol, but the protocol > sometimes sends multiple responses to a single request. Does anybody > know of a dissector that handles this case properly, so that I could > take a

Re: [Wireshark-dev] CVS dataset required

2008-06-20 Thread Guy Harris
Eloy Paris wrote: > What do you mean by a "CVS dataset"? Is it a packet capture of the > execution of a cvs command? If so I don't think you've come to the right > place to ask for that since this mailing list is to discuss Wireshark > development. [EMAIL PROTECTED] would be the right list; it's

Re: [Wireshark-dev] CVS dataset required

2008-06-20 Thread Eloy Paris
On Fri, Jun 20, 2008 at 02:44:58PM +0530, Mayank Jain Nawal wrote: > Hi, > > I want CVS capture file. Can anybody capture it and send it to me or > let me know how can I do so. > What do you mean by a "CVS dataset"? Is it a packet capture of the executi

Re: [Wireshark-dev] LUA development highlighting bytefield display with LUA

2008-06-20 Thread Luis EG Ontanon
it turns the protocol name into lowercase so that'd be: myproto.stuff it should turn green if it is ok. what about the [Expression...] dialog do you see your proto there? On Fri, Jun 20, 2008 at 6:05 PM, Rowswell, Brent <[EMAIL PROTECTED]> wrote: > Whenever I try to run the filter on the Prot

Re: [Wireshark-dev] LUA development highlighting bytefield display with LUA

2008-06-20 Thread Rowswell, Brent
Whenever I try to run the filter on the ProtoFields wireshark comes up with an error. I'm trying to assign the ProtoField as such: local my_proto = Proto("MYPROTO", "myproto does some stuff") local test = ProtoField.uint8("stuff") my_proto.fields = test And the filter I'm trying to use is MYPROT

Re: [Wireshark-dev] LUA development highlighting bytefield display with LUA

2008-06-20 Thread Luis EG Ontanon
On Fri, Jun 20, 2008 at 3:58 PM, Rowswell, Brent <[EMAIL PROTECTED]> wrote: > So when you say that using a ProtoField would create a filterable field, > do you mean that wireshark can then filter based on some field in the > protocol which has the ProtoField added to it? Yes, That's exactly it. >

[Wireshark-dev] CVS dataset required

2008-06-20 Thread Mayank Jain Nawal
Hi, I want CVS capture file. Can anybody capture it and send it to me or let me know how can I do so. We export RSH=SSh. I think during this we are sending data on SSH. So the captured packets are of ssh not of cvs I guess. Please correct me if I am wrong. Thanks Regards Mayank Jain. __

Re: [Wireshark-dev] LUA development highlighting bytefield display with LUA

2008-06-20 Thread Rowswell, Brent
So when you say that using a ProtoField would create a filterable field, do you mean that wireshark can then filter based on some field in the protocol which has the ProtoField added to it? If so, then what would that field be, and how would you access it? E.G. does that mean that when I start u

[Wireshark-dev] Request/Response tracking with multiple responses

2008-06-20 Thread Thomas Boehne
I followed the README.request_response_tracking to add request/response tracking to a UDP based protocol, but the protocol sometimes sends multiple responses to a single request. Does anybody know of a dissector that handles this case properly, so that I could take a look at the code? Or is it bas

[Wireshark-dev] Dissecting based on UDP source port

2008-06-20 Thread Stig Bjørlykke
Hi. When sending UDP packets we get random source ports, and from MS Windows they usually starts just above 1024 (the registered ports range). Wireshark uses the source port when picking a dissector, which leads to some wrong dissectors being used (and malformed packets). In just a few hours I g

Re: [Wireshark-dev] Improvement to WIMAXASNCP for decoding IEEE802.16e specified TLV's

2008-06-20 Thread smit.rastogi
Hi, The IEEE TLV's currently appear WITHIN some specific messages decoded by WIMAXASNCP. I guess that is something to do with profile B of the ASN part of the Network Reference Model, which groups the BS along with the ASN gateway, and thus passes on certain IEEE TLV's embedded within NWG defi

Re: [Wireshark-dev] Improvement to WIMAXASNCP for decoding IEEE 802.16e specified TLV's

2008-06-20 Thread Martin Mathieson
On Fri, Jun 20, 2008 at 5:55 AM, <[EMAIL PROTECTED]> wrote: > Hi there, > > Firstly, a big thank you for your replies, especially as they were very > prompt. > > The find_dissector() function works perfectly, as I discovered that the > Intel WiMAX plugin registers the dissector as "wmx", and there