Re: [Wireshark-dev] dissecting TCP packets with multiple PDUs

On Fri, Aug 5, 2016 at 1:39 PM, John Dill wrote: > One problem I have is that I'm creating multiple subtrees for a protocol > when two PDUs are found in the same frame. What's the best way to avoid > this? > > \code > gint > dissect_mk32_tcp_pdu(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tre

Re: [Wireshark-dev] My master-2.2 build broke

Hi, Further research found that Martin Kaiser already solved this problem in master: https://code.wireshark.org/review/16799 Simply a case of back porting to master-2.2. Obviously the buildbots don’t pick up these Qt4 related problems. Anyway, thanks Martin! Jaap > On 10 Aug 2016, at 00:35,

Re: [Wireshark-dev] Test decryption ESP and ISAKMP on wireshark

Hi, Tshark uses the same dissection engine as Wireshark does and uses the same files. So if you work out which files contains the relevant data you can set these up, do a Tshark run with required parameters and check the (text) output. Thanks, Jaap > On 11 Aug 2016, at 11:51, Codrut Grosu

[Wireshark-dev] Test decryption ESP and ISAKMP on wireshark

Hi, I just finished writing a plugin for strongSwan[1], an open source IPsec-based VPN Solution, that will export ESP, IKEv1 and IKEv2 decryption tables in a wireshark compatible format.[2],[3] Now I want to test the plugin. Until now, I run strongSwan with the new plugin loaded, then I make