Re: [Wireshark-dev] N in 1 packets

2011-12-10 Thread Guy Harris
On Dec 10, 2011, at 10:23 PM, Guy Harris wrote: > So if those 16-byte frames have no internal structure (for example, you don't > have a time stamp in each frame), but are just like, for example, the line > boundaries in a hex dump, my inclination would be to have the pcap module > break the b

Re: [Wireshark-dev] N in 1 packets

2011-12-10 Thread Guy Harris
On Dec 10, 2011, at 5:11 AM, Sake Blok wrote: > The task of libpcap is to capture frames and hand each frame to wireshark, no > dissection is done by libpcap, that is wiresharks job. Deciding what a "frame" is for a particular capture, however, could be libpcap's job. Whether those 16-byte fr

Re: [Wireshark-dev] N in 1 packets

2011-12-10 Thread Guy Harris
On Dec 9, 2011, at 3:11 PM, Akos Vandra wrote: > For my thesis project I am trying to get a new type of data source, > ARM TPIU trace messages to work with wireshark. > > I am starting of getting the hang of how libpcap works, however a > strange problem arose, that I don't know how would be bes

Re: [Wireshark-dev] Console Window option moved?

2011-12-10 Thread Guy Harris
On Dec 10, 2011, at 4:11 PM, Akos Vandra wrote: > As far as I know, I can use g_print for printing debug info from > dumpcap code... isn't that right? The documentation for g_print says Outputs a formatted message via the print handler. The default print handler simply outputs the mess

Re: [Wireshark-dev] Console Window option moved?

2011-12-10 Thread Akos Vandra
Hello! As far as I know, I can use g_print for printing debug info from dumpcap code... isn't that right? I tried compiling code with that, and it builds fine. However nothing is printed on the console. I am using a linux build system (ubuntu 10.04 LTS). Regards, Ákos Vandra On 10 December 2

Re: [Wireshark-dev] Console Window option moved?

2011-12-10 Thread Chris Maynard
Akos Vandra writes: > I can find references to a console window within wireshark that could > be used to debug dumpcap, but I cannot find the option on the place it > is supposed to be. > In the wireshark tips it sais that it should be under > edit->preferences->user interface, but it's nowhere t

Re: [Wireshark-dev] N in 1 packets

2011-12-10 Thread Akos Vandra
Thank you for your answers. Maybe I'll solve this by doing some of the packet handling (extracting the inner packets) from libpcap, and doing the real dissection in wireshark. Maybe that won't be too much of a hack. However I have another question that arose: Is there a way to configure the captur

Re: [Wireshark-dev] N in 1 packets

2011-12-10 Thread Sake Blok
On 10 dec 2011, at 00:11, Akos Vandra wrote: > The target want to send these packet, in timely order: > > Exception 15 occured - 5 bytes > Exception 3 occured - 5 bytes > Memory address written - 6 bytes > Exception 3 handling done - 5 bytes > Exception 15 handling done - 5 bytes > All exceptions

Re: [Wireshark-dev] [Wireshark-commits] rev 40108: / /trunk/epan/dissectors/: Makefile.common packet-eth.c packet-vssmonitoring.c /trunk/: AUTHORS

2011-12-10 Thread Sake Blok
On 10 dec 2011, at 07:10, Guy Harris wrote: > On Dec 6, 2011, at 3:07 PM, s...@wireshark.org wrote: > >> http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=40108 >> >> User: sake >> Date: 2011/12/06 03:07 PM >> >> Log: >> - Make a distinction between ethernet padding and an ethern

[Wireshark-dev] Console Window option moved?

2011-12-10 Thread Akos Vandra
Hi! I can find references to a console window within wireshark that could be used to debug dumpcap, but I cannot find the option on the place it is supposed to be. In the wireshark tips it sais that it should be under edit->preferences->user interface, but it's nowhere to be found. I am using the