Re: [Wireshark-dev] Issue with building wireshark from source

2011-10-31 Thread Jeff Morriss
On 10/31/2011 08:59 PM, vijay wrote: I have installed all the dependent packages - gtk3.1 , glib, pango atk and all the required packages. Now when I run ./configure in wireshark build I get the following error: checking for GTK+ - version >= 2.4.0... no *** Could not run GTK+ test program, chec

[Wireshark-dev] Issue with building wireshark from source

2011-10-31 Thread vijay
I have installed all the dependent packages - gtk3.1 , glib, pango atk and all the required packages. Now when I run ./configure in wireshark build I get the following error: checking for GTK+ - version >= 2.4.0... no *** Could not run GTK+ test program, checking why... *** The test program failed

Re: [Wireshark-dev] What's the proper way to modify the tvb content for upper layer dissection ?

2011-10-31 Thread Jaap Keuter
Hi, See tvb_new_child_real_data() Thanks, Jaap On Sun, 30 Oct 2011 12:17:17 +0100, Sylvain Munaut wrote: > Hi, > > I have a protocol where the payload for the next layer is not simply > the rest of the tvb ( The last nibble of the last octet of data octet > needs to come from some fiel

Re: [Wireshark-dev] Affix bluetooth stack

2011-10-31 Thread Tyson Key
PS - I've just had a play with the "virtual HCI" implementation in the Linux kernel version shipped with *buntu 11.04, and it appears that the maintainers of their LibPCap builds have thoughtfully decided to disable support for capturing on Bluetooth interfaces, for some unknown reason. In this ca

Re: [Wireshark-dev] Affix bluetooth stack

2011-10-31 Thread Tyson Key
Yes. Please see the newly-updated wiki page regarding this (at http://wiki.wireshark.org/CaptureSetup/Bluetooth). It's been a long time since I've worked with Bluetooth, but I clearly remember it working under Fedora without any additional configuration, or effort on my part. A "hcidump" utility

Re: [Wireshark-dev] Affix bluetooth stack

2011-10-31 Thread vijay
Hi Tyson, I need to do a live capture on Bluetooth traffic does wireshark support capture with BLueZ stack in linux ? Vijay On Mon, Oct 31, 2011 at 3:10 AM, Tyson Key wrote: > Hi Vijay, > > There's no need to install Affix under KUbuntu (although installing other > stuff from the repositorie

Re: [Wireshark-dev] support for Bluetooth protocol live capture

2011-10-31 Thread Guy Harris
On Oct 31, 2011, at 6:55 AM, Andrei Emeltchenko wrote: > This is not exactly correct. By which you mean "not at all correct", presumably. :-) I've updated the Wiki page to note that it's the BlueZ stack, and that (as per the history page on the BlueZ site) it first became part of the mainline

Re: [Wireshark-dev] Affix bluetooth stack

2011-10-31 Thread Guy Harris
On Oct 31, 2011, at 6:52 AM, Andrei Emeltchenko wrote: > Hi, > > On Mon, Oct 31, 2011 at 10:03 AM, vijay wrote: >> Hi, >> >> I not sure if this is the correct forum to post this but, Could some one >> tell me if it is possible to install affix bluetooth stack in kubuntu? >> Currently BLueZ blu

Re: [Wireshark-dev] Same protocol dissector in built-in and plugin form coexisting under different names?

2011-10-31 Thread Anders Broman
Hi, If possible it's better to try to do that via hooks in the existing dissector. packet-gtp.c has a dissector table to dissect protocol extension by vendor ID if the protocols extension mechanism is used. Regards Anders From: wireshark-dev-boun...@wireshark.org

[Wireshark-dev] Same protocol dissector in built-in and plugin form coexisting under different names?

2011-10-31 Thread David Wei HX
Dear Wireshark community, Is it possible to have two dissectors for the same protocol, one built-in and one as a plugin, with the plugin having a slightly different name that can dissect additional (perhaps proprietary) information? For example, without modifying the built-in GTP dissector, can

Re: [Wireshark-dev] support for Bluetooth protocol live capture

2011-10-31 Thread Andrei Emeltchenko
Hi, On Fri, Oct 28, 2011 at 6:37 AM, Guy Harris wrote: > > On Oct 27, 2011, at 7:50 PM, vijay wrote: > >> Can anyone tell me if wireshark support live capture of bluetooth traffic. > > On Linux, yes. > >> Wireshark wiki says libpcap supports live capture of bluetooth packets , >> Wireshark can r

Re: [Wireshark-dev] Affix bluetooth stack

2011-10-31 Thread Andrei Emeltchenko
Hi, On Mon, Oct 31, 2011 at 10:03 AM, vijay wrote: > Hi, > > I not sure if this is the correct forum to post this but, Could some one > tell me if it is possible to install affix bluetooth stack in kubuntu? > Currently BLueZ bluetooth stack is installed and wireshark requires Affix Where did you

[Wireshark-dev] Looking for h248/asn1 packet traces

2011-10-31 Thread Alex Lindberg
I am looking for examples of h248/asn1 based packet captures to validate my my custom plugins for h248. All h248 versions (1, 2 and 3). The only examples on the sample captures page only include MEGACO (text based) examples.     http://wiki.wireshark.org/SampleCaptures If you have any you wish

Re: [Wireshark-dev] Is it still ok to create hidden items ?

2011-10-31 Thread ronnie sahlberg
Make each of them an expansion and show the generic ".node" field inside the expansion with a help blurb of "matches either sender or receiver" ? Wireshark has a 5 digit number of filterable fields already so for users to find that a certain field exists and can be used is "tricky". Unless your

Re: [Wireshark-dev] Is it still ok to create hidden items ?

2011-10-31 Thread Roland Knall
Hi Ok, always ready to learn something new, but answer me this: You have two fields displayed, in my case: Sender: 0x0001 Receiver: 0x0002 How do you add a generated field, which will match either one of these entries, so that you can ask: opensafety.msg.node == 0x0002 and only receive messa

Re: [Wireshark-dev] Is it still ok to create hidden items ?

2011-10-31 Thread Anders Broman
Hi, I'd say using a generated field is more elegant :-) /Anders -Original Message- From: wireshark-dev-boun...@wireshark.org [mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Roland Knall Sent: den 31 oktober 2011 10:51 To: Developer support list for Wireshark Subject: Re: [Wires

Re: [Wireshark-dev] Is it still ok to create hidden items ?

2011-10-31 Thread Roland Knall
Hi As I just came across something regarding this issue, there is a counter argument to the whole "if it is not there, the user may not find it" idea. Looking at the way the IP dissector is used, hidden fields have their merits. ip.addr is a more generic way of avoiding ( ip.src == x || ip.dest ==

Re: [Wireshark-dev] Affix bluetooth stack

2011-10-31 Thread Tyson Key
Hi Vijay, There's no need to install Affix under KUbuntu (although installing other stuff from the repositories related to Bluetooth wouldn't hurt). Just enable Bluetooth connectivity as normal, and connect your adapter if necessary. Tyson. On 31 October 2011 08:03, vijay wrote: > Hi, > > I no

[Wireshark-dev] Affix bluetooth stack

2011-10-31 Thread vijay
Hi, I not sure if this is the correct forum to post this but, Could some one tell me if it is possible to install affix bluetooth stack in kubuntu? Currently BLueZ bluetooth stack is installed and wireshark requires Affix stack for live capture of bluetooth traffic. The affix website says that it