Re: [Wireshark-dev] access to pcapr.net?

2012-08-17 Thread Aaron Turner
uessable like his first name at spirent.net or something like that. -- Aaron Turner http://synfin.net/ Twitter: @synfinatic http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, d

Re: [Wireshark-dev] Security issue being reported by the Secunia PSI scanner.

2010-01-06 Thread Aaron Turner
The "report" is completely lacking in detail, but I'm going to guess what is complaining about is this: http://secunia.com/advisories/37852/ The scanner noticed that 2.16.2 < 2.18.4 and hence assumes it is vulnerable. -- Aaron Turner http://synfin.net/ http://tcpreplay.

Re: [Wireshark-dev] reading from named pipes on OSX?

2009-12-07 Thread Aaron Turner
our setup. Running OS X 10.6.2.Wireshark from DarwinPorts. I just tried the 1.2.2 Wireshark pre-compiled Intel binary which seems to work fine... I wonder if it's something DarwinPorts is doing??? -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and

[Wireshark-dev] reading from named pipes on OSX?

2009-12-07 Thread Aaron Turner
Reading the man page for tshark indicates that the following is vaild: mkfifo foo tshark -i foo & cat somefile.pcap >foo Which seems to work on Linux, but not OS X: Capturing on foo tshark: Unexpected error from select: Invalid argument Using 1.2.2 & 1.2.4... is this a known issue?

Re: [Wireshark-dev] Feature Request

2009-07-23 Thread Aaron Turner
d it dangerous to assume any anonymization feature can make sensitive pcaps magically safe for sharing on pcapr.net or other public websites. Even if successful at anonymization, there's a good chance that the edits will break the protocol in question and render the data useless. No

Re: [Wireshark-dev] Generic Plugin

2009-05-30 Thread Aaron Turner
On Sat, May 30, 2009 at 11:49 AM, Sachin Gupta wrote: > Hi, > > Please tell me how I can contribute it to Wireshark? > I hope nothing like this already exist. Typically people send patches to the list for review & inclusion by the developers. -- Aaron Turner http://

Re: [Wireshark-dev] writing non-Ethernet pcapng files

2009-05-21 Thread Aaron Turner
me to do differently, let me know. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin On Thu,

Re: [Wireshark-dev] writing non-Ethernet pcapng files

2009-05-21 Thread Aaron Turner
ng from pcap to pcapng looses the ecapsulation type for some reason (at least with my HDLC test). I'm going to see if I can dig around and figure out what's going on. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Wind

Re: [Wireshark-dev] writing non-Ethernet pcapng files

2009-05-21 Thread Aaron Turner
On Thu, May 21, 2009 at 12:20 PM, Michael Tüxen wrote: > On May 21, 2009, at 9:15 PM, Aaron Turner wrote: > >> On Thu, May 21, 2009 at 11:55 AM, Michael Tüxen >> wrote: >>> Hi Aaron, >>> >>> can you check also with the latest svn version? >>

Re: [Wireshark-dev] writing non-Ethernet pcapng files

2009-05-21 Thread Aaron Turner
On Thu, May 21, 2009 at 11:55 AM, Michael Tüxen wrote: > Hi Aaron, > > can you check also with the latest svn version? This was trunk-1.0 r28436. Are you working in trunk (wireshark 1.1.x)? -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay

[Wireshark-dev] writing non-Ethernet pcapng files

2009-05-21 Thread Aaron Turner
mented out the check, and did a test (Cisco HDLC) and had no problem reading a standard pcap file and converting it to pcapng. Am I missing something? -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up ess

Re: [Wireshark-dev] pcap-ng

2009-05-19 Thread Aaron Turner
t find the cvs repository info so I could check it out. Is there a public repo yet? -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little temporary Safety, deserve n

Re: [Wireshark-dev] pcap-ng

2009-05-19 Thread Aaron Turner
On Tue, May 19, 2009 at 12:28 PM, Michael Tüxen wrote: > On May 19, 2009, at 9:20 PM, Aaron Turner wrote: > >> On Tue, May 19, 2009 at 4:58 AM, Michael Tüxen >> wrote: >>> Hi Faten, >>> >>> the current svn version is able to >>> - Wireshark

Re: [Wireshark-dev] pcap-ng

2009-05-19 Thread Aaron Turner
right now... > > Best regards > Michael Is there a library available for r/w pcap-ng files ala libpcap? -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows Those who would give up essential Liberty, to purchase a little

Re: [Wireshark-dev] Add restrictions to arguments of dumpcap

2009-05-07 Thread Aaron Turner
On Thu, May 7, 2009 at 12:26 PM, Michael Tüxen wrote: > On May 7, 2009, at 2:34 PM, Nathan Jennings wrote: > >> On 5/7/2009 9:10 AM, Sébastien Tandel wrote: >>> On Thu, May 7, 2009 at 03:05, Stephen Donnelly >>> wrote: >>> >>>> Aaron Turner w

Re: [Wireshark-dev] Add restrictions to arguments of dumpcap

2009-05-07 Thread Aaron Turner
--interface=eth1="tcp port 80" Would be valid. Also there's nothing to prevent: -i "eth1 tcp port 80" So technically you just need to choose a delim which isn't a valid network device name character. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pc

Re: [Wireshark-dev] Add restrictions to arguments of dumpcap

2009-05-06 Thread Aaron Turner
On Wed, May 6, 2009 at 8:59 PM, Michael Tüxen wrote: > On May 6, 2009, at 3:40 PM, Aaron Turner wrote: > >> Personally I think different filters for different interfaces doesn't >> make a lot of sense.  I really can't imagine a situation when you'd >> need t

Re: [Wireshark-dev] Add restrictions to arguments of dumpcap

2009-05-06 Thread Aaron Turner
that single filter w/ multiple interfaces is a more common case then multiple filters & multiple interfaces. Ideally the more common case shouldn't require you to specify the same filter twice. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing and replay tools for U

Re: [Wireshark-dev] Help on Wireshark usage through Java script

2009-05-04 Thread Aaron Turner
file through > "wireshark" using javascript. (Like by creating Wireshark ActiveXObject) and > using read function to read the messages into an array and processing them > for the timestamps. Use tshark (comes with wireshark) to process the pcap into a PDML (xml) file.

Re: [Wireshark-dev] CVS dataset required

2008-06-20 Thread Aaron Turner
lace to ask for that since this mailing list is to discuss Wireshark >> development. > > [EMAIL PROTECTED] would be the right list; it's used for > discussion of network protocol and traffic issues, as well as user > questions about how to use Wireshark. He could also ask the ope

Re: [Wireshark-dev] Using wireshark protocol parsers to buildpackets

2007-02-11 Thread Aaron Turner
rmation to one person is confidential to another. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing & replay tools for Unix On 2/11/07, [Chris] NULL <[EMAIL PROTECTED]> wrote: > Thanks lot for your answer. Packet trace anonymization was exactly the poi