[Wireshark-dev] buildbot failure in Wireshark (development) on Windows-XP-x86

2011-06-26 Thread buildbot-no-reply
The Buildbot has detected a new failure of Windows-XP-x86 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/Windows-XP-x86/builds/3283 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: windows-xp-x86 Build Reason

Re: [Wireshark-dev] How to build on MACOS (with revised instructions)

2011-06-26 Thread Michael Tüxen
On Jun 26, 2011, at 10:41 PM, Guy Harris wrote: > > On Jun 26, 2011, at 1:34 PM, Michael Tüxen wrote: > >> Isn't the first step to run >> ./autogen.sh >> ./configure >> before you can use make? These steps require the libraries to be there... > > ...unless you're just building from a source tarb

Re: [Wireshark-dev] why cannot I use heur_dissector_add("ip", .....

2011-06-26 Thread John x
I will consider about it thanks > From: g...@alum.mit.edu > Date: Sun, 26 Jun 2011 14:17:37 -0700 > To: wireshark-dev@wireshark.org > Subject: Re: [Wireshark-dev] why cannot I use heur_dissector_add("ip", . > > > On Jun 26, 2011, at 2:09 PM, John x wrote: > > > these packets run directly

Re: [Wireshark-dev] why cannot I use heur_dissector_add("ip", .....

2011-06-26 Thread Guy Harris
On Jun 26, 2011, at 2:09 PM, John x wrote: > these packets run directly atop IP, any suggestions? 1) Get a protocol number from the IANA and use it, instead of some hack based on the TTL value. 2) Hack the IP dissector in a private version of Wireshark.

Re: [Wireshark-dev] why cannot I use heur_dissector_add("ip", .....

2011-06-26 Thread John x
these packets run directly atop IP, any suggestions? Thanks > From: g...@alum.mit.edu > Date: Sun, 26 Jun 2011 13:48:07 -0700 > To: wireshark-dev@wireshark.org > Subject: Re: [Wireshark-dev] why cannot I use heur_dissector_add("ip", . > > > On Jun 26, 2011, at 1:44 PM, John x wrote: > > >

Re: [Wireshark-dev] why cannot I use heur_dissector_add("ip", .....

2011-06-26 Thread Guy Harris
On Jun 26, 2011, at 1:44 PM, John x wrote: > Yes it is that TTL changes in-flight. But my packets are captured on a > specific link, there are only 2 or 3 kinds of packets. The way to distinguish > them is only the TTL value. So these packets run *directly* atop IP? Or do they run atop UDP or

Re: [Wireshark-dev] why cannot I use heur_dissector_add("ip", .....

2011-06-26 Thread John x
Thank you Yes it is that TTL changes in-flight. But my packets are captured on a specific link, there are only 2 or 3 kinds of packets. The way to distinguish them is only the TTL value. So here if IP.ttl doesnot work, how to instruct wireshark to handoff the 3 different kinds of packets to

Re: [Wireshark-dev] How to build on MACOS (with revised instructions)

2011-06-26 Thread Guy Harris
On Jun 26, 2011, at 1:34 PM, Michael Tüxen wrote: > Isn't the first step to run > ./autogen.sh > ./configure > before you can use make? These steps require the libraries to be there... ...unless you're just building from a source tarball, but, as we supply binaries for OS X, there's probably no

Re: [Wireshark-dev] How to build on MACOS (with revised instructions)

2011-06-26 Thread Michael Tüxen
On Jun 26, 2011, at 9:36 PM, Guy Harris wrote: > > On Jun 26, 2011, at 8:10 AM, Joerg Mayer wrote: > >> Thanks to everyone who responded! I've just finished my first build and >> run of Wireshark (took me about 3 hours). >> >> The result of your instructions, hints and remarks is included below

Re: [Wireshark-dev] How to build on MACOS (with revised instructions)

2011-06-26 Thread Guy Harris
On Jun 26, 2011, at 8:10 AM, Joerg Mayer wrote: > Thanks to everyone who responded! I've just finished my first build and > run of Wireshark (took me about 3 hours). > > The result of your instructions, hints and remarks is included below. Maybe we > can include it after some reviewing/ testing/

Re: [Wireshark-dev] why cannot I use heur_dissector_add("ip", .....

2011-06-26 Thread Guy Harris
On Jun 25, 2011, at 11:45 PM, John x wrote: > but here I want to use ip.ttl to instruct wireshark to handoff packet to my > dissector. Why? The TTL value changes in-flight, so it cannot be meaningfully used to distinguish what protocol is being carried in an IP packet. > In my specific situa

Re: [Wireshark-dev] How to build on MACOS (with revised instructions)

2011-06-26 Thread Joerg Mayer
Thanks to everyone who responded! I've just finished my first build and run of Wireshark (took me about 3 hours). The result of your instructions, hints and remarks is included below. Maybe we can include it after some reviewing/ testing/ tweaking into the documentation. ciao Jörg -- Joerg