Re: [Wireshark-dev] Stats/tap plugin problem

2010-07-26 Thread Guy Harris
On Jul 26, 2010, at 10:32 AM, Floris van Nee wrote: > When I try to do some more advanced stuff I run into a couple of problems. > The main problem is that I'd like to be able to access the tree (or at least > some information, like sequence number of packet, data of ACK etc.) of the > protoco

Re: [Wireshark-dev] Stats/tap plugin problem

2010-07-26 Thread Guy Harris
On Jul 26, 2010, at 9:32 PM, Floris van Nee wrote: > I wonder if there's a way to link with libui.lib, libui, unlike libwsutil, libwiretap, and libwireshark, isn't a "real" library, it's an artifact of the build process. The object files in libui get linked into the Wireshark binary; no other

Re: [Wireshark-dev] Stats/tap plugin problem

2010-07-26 Thread Floris van Nee
Okay, thanks for your help. It is greatly appreciated. I still haven't fixed it though.. I wonder if there's a way to link with libui.lib, because I presume the definition is in there. I haven't been able to do so without linking errors though. Floris On Mon, Jul 26, 2010 at 6:39 PM, Maynard, Chr

Re: [Wireshark-dev] Stats/tap plugin problem

2010-07-26 Thread Maynard, Chris
OK, I had assumed register_dfilter_stat was defined in one of the .c files in epan/ that's already part of libwireshark.dll, but it's not; it's in gtk/tap_dfilter_dlg.c. My apologies. I'm not sure how to solve your problem. - Chris From: wireshark-dev-boun...@wireshark.org [mailto:wireshark

Re: [Wireshark-dev] Stats/tap plugin problem

2010-07-26 Thread Floris van Nee
Thanks for the suggestion. This leads to a similar error when trying to compile Wireshark though: libwireshark.def : error LNK2001: unresolved external symbol register_dfilter_st at libwireshark.lib : fatal error LNK1120: 1 unresolved externals NMAKE : fatal error U1077: '"C:\Program Files (x86)\M

Re: [Wireshark-dev] Stats/tap plugin problem

2010-07-26 Thread Maynard, Chris
Did you try adding register_dfilter_stat to epan/libwireshark.def? - Chris From: wireshark-dev-boun...@wireshark.org [mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Floris van Nee Sent: Monday, July 26, 2010 5:23 PM To: wireshark-dev@wireshark.org Subject: Re: [Wireshark-dev] Stats/tap

Re: [Wireshark-dev] Stats/tap plugin problem

2010-07-26 Thread Floris van Nee
To partially answer my own question: it seems that by bypassing stats_tree you can manually register to listen to a tap. Here it is possible to specify that you want the complete tree to be build (the flags parameter of function register_tap_listener). Here arises another problem though, because b

Re: [Wireshark-dev] building wireshark in linux

2010-07-26 Thread Maynard, Chris
Have you read doc/README.plugins? - Chris From: wireshark-dev-boun...@wireshark.org [mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of ajay seshadri Sent: Monday, July 26, 2010 3:14 PM To: Developer support list for Wireshark Subject: [Wireshark-dev] building wireshark in linux Hi, What

[Wireshark-dev] building wireshark in linux

2010-07-26 Thread ajay seshadri
Hi, What are the changes to be made to compile and run a Wireshark dissector plugin in Linux? The developer's manual gives in depth information about the changes to be made to the various files (including *.nmake) to compile it in windows. Is 'make all' sufficient in linux? Would it generate

Re: [Wireshark-dev] query regarding field registration of unicode string

2010-07-26 Thread ajay seshadri
Hi, Can you please tell me the arguments of the g_free() function, to be used along with tvb_fake_unicode()? I couldn't find it in the developer document. Also, is it supposed to be called at the end of the dissector? Thanks, Ajay From: Jaap Keuter To: Devel

[Wireshark-dev] Stats/tap plugin problem

2010-07-26 Thread Floris van Nee
Hi, I am trying to make a plugin for Wireshark which makes some statistics about captured packets. The basic things work: it can count packets, use the tap to send information collected while dissecting to the stats plugin and do some other stuff using the stats_tree functions. Now I have the fol

[Wireshark-dev] buildbot failure in Wireshark (development) on Ubuntu-10.04-x64

2010-07-26 Thread buildbot-no-reply
The Buildbot has detected a new failure of Ubuntu-10.04-x64 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/Ubuntu-10.04-x64/builds/330 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: ubuntu-10.04-x64 Build R

Re: [Wireshark-dev] Buffering packets for dissection

2010-07-26 Thread Jaap Keuter
Hi, What's your transport protocol? Thanks, Jaap On Mon, 26 Jul 2010 16:29:42 +0300 (EEST), andreas.akes...@kolumbus.fi wrote: > Hello, > > I'm currently writing a dissector which requires packet buffering to > work. The dissector more or less has to brute-force the packet stream > to find the

[Wireshark-dev] buildbot failure in Wireshark (development) on Windows-7-x64

2010-07-26 Thread buildbot-no-reply
The Buildbot has detected a new failure of Windows-7-x64 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/Windows-7-x64/builds/810 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: windows-7-x64 Build Reason: B

[Wireshark-dev] Buffering packets for dissection

2010-07-26 Thread andreas . akesson
Hello, I'm currently writing a dissector which requires packet buffering to work. The dissector more or less has to brute-force the packet stream to find the actual data, but it needs at least a dozen packets of data before it can do anything. So, it doesn't know when the data begins, and how m

[Wireshark-dev] buildbot failure in Wireshark (development) on OSX-10.5-x86

2010-07-26 Thread buildbot-no-reply
The Buildbot has detected a new failure of OSX-10.5-x86 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/OSX-10.5-x86/builds/834 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: osx-10.5-x86 Build Reason: Buil

[Wireshark-dev] buildbot failure in Wireshark (development) on OSX-10.6-x64

2010-07-26 Thread buildbot-no-reply
The Buildbot has detected a new failure of OSX-10.6-x64 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/OSX-10.6-x64/builds/416 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: osx-10.6-x64 Build Reason: Buil

Re: [Wireshark-dev] Passing further information between dissections

2010-07-26 Thread Alan Bowman
Perfect, that's exactly what I was after. Thanks very much. Alan On 26 July 2010 09:07, Tarjei Knapstad wrote: > On 23 July 2010 13:49, Alan Bowman wrote: >> I have written two dissectors for some protocols I am using, one of >> which is wrapped inside the other.  Protocol B is used if a parti

Re: [Wireshark-dev] Passing further information between dissections

2010-07-26 Thread Anders Broman
Tarjei Knapstad skrev 2010-07-26 10:07: > On 23 July 2010 13:49, Alan Bowman wrote: > >> I have written two dissectors for some protocols I am using, one of >> which is wrapped inside the other. Protocol B is used if a particular >> byte (A6, below) in protocol A is a particular value. I hav

Re: [Wireshark-dev] Passing further information between dissections

2010-07-26 Thread Tarjei Knapstad
On 23 July 2010 13:49, Alan Bowman wrote: > I have written two dissectors for some protocols I am using, one of > which is wrapped inside the other.  Protocol B is used if a particular > byte (A6, below) in protocol A is a particular value.  I have > registered A using register_dissector_table().