Re: [Wireshark-dev] Memory corrupted

2012-03-14 Thread Akos Vandra
I was referring to the fact that malloc(0) should run fine, without any errors. Turns out I indeed overlooked something, and really was writing the pointer returned, so please disregard my report. Regards, Ákos On 14 March 2012 21:51, Guy Harris wrote: > > On Mar 14, 2012, at 1:15 PM, Jakub Za

Re: [Wireshark-dev] Memory corrupted

2012-03-14 Thread Guy Harris
On Mar 14, 2012, at 1:15 PM, Jakub Zawadzki wrote: > On Wed, Mar 14, 2012 at 09:01:07PM +0100, Akos Vandra wrote: >> Figured it out, however this is a bug in wireshark, I suppose. >> A call to ep_alloc(0) was the culprit. IMHO that should not be a >> problem, as I expect it to work as malloc work

Re: [Wireshark-dev] Memory corrupted

2012-03-14 Thread Jakub Zawadzki
On Wed, Mar 14, 2012 at 09:01:07PM +0100, Akos Vandra wrote: > Figured it out, however this is a bug in wireshark, I suppose. > A call to ep_alloc(0) was the culprit. IMHO that should not be a > problem, as I expect it to work as malloc works, and malloc should > handle a 0 size, as stated in the C

Re: [Wireshark-dev] Memory corrupted

2012-03-14 Thread Akos Vandra
Hi! Figured it out, however this is a bug in wireshark, I suppose. A call to ep_alloc(0) was the culprit. IMHO that should not be a problem, as I expect it to work as malloc works, and malloc should handle a 0 size, as stated in the C standard. Regards, Ákos On 14 March 2012 20:52, Akos Vandra

Re: [Wireshark-dev] Memory corrupted

2012-03-14 Thread Bill Meier
On 3/14/2012 3:52 PM, Akos Vandra wrote: Hi! I'm developing a dissector for a proprrietary protocol. It has been working up until now. Today it started crashing wireshark, with the not very helpful message: " 20:48:51 Err Memory corrupted Aborted " Can you please help me what could b

[Wireshark-dev] Memory corrupted

2012-03-14 Thread Akos Vandra
Hi! I'm developing a dissector for a proprrietary protocol. It has been working up until now. Today it started crashing wireshark, with the not very helpful message: " 20:48:51 Err Memory corrupted Aborted " Can you please help me what could be the problem? I am using ep_alloc in the c

Re: [Wireshark-dev] tshark -x options

2012-03-14 Thread Guy Harris
On Mar 14, 2012, at 10:59 AM, kahou lei wrote: > Thanks for the reply. Actually I want another way around. That is, I don't > want the Packet Summary Line in Tshark. There isn't a flag to do that. You *could* try using tshark -o 'column.format:"No.", "%m"' -o column.hidden:%m ... whi

Re: [Wireshark-dev] tshark -x options

2012-03-14 Thread kahou lei
On 03/13/2012 09:00 PM, Guy Harris wrote: On Mar 13, 2012, at 2:45 PM, kahou lei wrote: Can anyone tell me if I can achieve the same thing that wireshark does in tshark? Yes. Enable "Packet summary line" in addition to "Packet bytes". ... In the File->Print menu (as opposed to the File->Expor

Re: [Wireshark-dev] tshark -x options

2012-03-14 Thread Jeff Morriss
Guy Harris wrote: On Mar 13, 2012, at 6:13 PM, Jeff Morriss wrote: On 03/13/2012 09:00 PM, Guy Harris wrote: On Mar 13, 2012, at 2:45 PM, kahou lei wrote: Can anyone tell me if I can achieve the same thing that wireshark does in tshark? Yes. Enable "Packet summary line" in addition to "Pa

Re: [Wireshark-dev] gsm system information parsing

2012-03-14 Thread Pascal Quantin
2012/3/14 Tom Mayer > Hi everyone, > > I have been working on a mobile project for university and have used > wireshark together with the osmocombb framework analyze gsm traffic. > > In my project I get the raw System Information 2/2ter/2bis messages and I > need to extract the neighbouring cell

[Wireshark-dev] gsm system information parsing

2012-03-14 Thread Tom Mayer
Hi everyone, I have been working on a mobile project for university and have used wireshark together with the osmocombb framework analyze gsm traffic. In my project I get the raw System Information 2/2ter/2bis messages and I need to extract the neighbouring cell information from it. The forma

Re: [Wireshark-dev] Connection Information using tshark

2012-03-14 Thread Maverick
Thanks Marco for the directions. But can I do it by looking at all the packets in the trace and than maintaining state for each connection that is seen. On Wed, Mar 14, 2012 at 5:18 AM, wrote: > On Wed, 14 Mar 2012 05:10:18 -0400, Maverick wrote: > >> Can someone please help me with getting conn

Re: [Wireshark-dev] Connection Information using tshark

2012-03-14 Thread marco
On Wed, 14 Mar 2012 05:10:18 -0400, Maverick wrote: Can someone please help me with getting connection information for each ip using tshark.Information such as When the connection was established, when it was terminated, how many bytes were transmitted. Is it possible to get this information fo

[Wireshark-dev] Connection Information using tshark

2012-03-14 Thread Maverick
Hi, Can someone please help me with getting connection information for each ip using tshark.Information such as When the connection was established, when it was terminated, how many bytes were transmitted. Is it possible to get this information for each ip in your trace file. Thanks, AK