Re: [Wireshark-dev] [Bug 4975] NFSv4 usability enhancements (Info column summaries, filterable fields)

2010-07-08 Thread Ian Schorr
I suppose the difference here would be that you can't use the "contains" keyword with "opcode" to do partial string matches. But that's not nearly as useful with NFSv4 as with protocols with longer, more complex names and/or many similar names (with roughly the sam

Re: [Wireshark-dev] MacOS/X builds

2010-07-07 Thread Ian Schorr
You're right - that's not a new issue in 33458. 33457 has the same problem. -Ian On Thu, Jul 8, 2010 at 4:21 AM, Guy Harris wrote: > Did the build before 33458 work on PPC?  I suspect not - that's an issue of > the libraries with which wireshark-bin is built, and wir

Re: [Wireshark-dev] MacOS/X builds

2010-07-06 Thread Ian Schorr
r33458 Intel 64-bit now works for me. A couple of recent builds, including 33452, did not (32-bit did and still does). r33458 PPC crashes for me, with: 2010-07-07 11:31:06.785 defaults[24422:10b] The domain/default pair of (kCFPreferencesAnyApplication, AppleAquaColorVariant) does not exist 2010

Re: [Wireshark-dev] MacOS/X builds

2010-07-06 Thread Ian Schorr
Coincidentally,I happened to notice earlier today that automated x64 builds are happening now, and noticed that they're having the same problem. On Tue, Jul 6, 2010 at 9:13 PM, Sake Blok wrote: > Great, that did the trick. I think we need to make SDKROOT determined at > compile time so that the

Re: [Wireshark-dev] How can i run wireshark on Win CE

2010-06-08 Thread Ian Schorr
Have you investigated just how much work is involved already and still interested in pursuing this? 2010/6/9 luoyantai : > And i have an another question,the dissectors,are they depend on > platform?need i do some changes? > _

Re: [Wireshark-dev] Sprintf weirdness

2010-06-02 Thread Ian Schorr
Thanks again, Guy. I'll think about it for a bit, but that's very possibly what I'll do. On Wed, Jun 2, 2010 at 6:57 PM, Guy Harris wrote: > > On Jun 1, 2010, at 10:10 PM, Ian Schorr wrote: > >> As you mention later, MS Visual Studio 2008 does not include those >

Re: [Wireshark-dev] Sprintf weirdness

2010-06-01 Thread Ian Schorr
On Wed, Jun 2, 2010 at 3:03 PM, Jaap Keuter wrote: > Hi, > > With "%lu" you tell sprintf to expect a 32 bit value on the stack, > while in fact you put 64 bit sized value 0 there. That reads like two > times 32 bit sized value 0, hence the results you see. > > The rest is left as an exercise to th

Re: [Wireshark-dev] Sprintf weirdness

2010-06-01 Thread Ian Schorr
On Wed, Jun 2, 2010 at 2:57 PM, Guy Harris wrote: > > On Jun 1, 2010, at 9:01 PM, Ian Schorr wrote: > > If you want the code to be portable, you'd have to hope that Microsoft > provides the C99 PRI[doux]64 macros, even though Visual Studio doesn't claim > to suppo

Re: [Wireshark-dev] Sprintf weirdness

2010-06-01 Thread Ian Schorr
ike it's actually being write twice, and sprintf is getting confused about what to write where. g_sprintf has the same problem as well. Bizarre. Thanks, Ian On Wed, Jun 2, 2010 at 2:44 PM, Guy Harris wrote: > > On Jun 1, 2010, at 9:01 PM, Ian Schorr wrote: > >> The weird thing

[Wireshark-dev] Sprintf weirdness

2010-06-01 Thread Ian Schorr
ve done something silly, though having a tough time guessing where. I haven't tested yet to see if this is something specific to the dev platform I'm using. At the moment that's Windows. Thanks, Ian ___

Re: [Wireshark-dev] Facing Issue while compiling Wireshark onWindowsXP

2010-01-18 Thread Ian Schorr
Yes, I believe a lot of those changes for MSVC2005/etc came in after 0.99.8. On Mon, Jan 18, 2010 at 8:18 PM, Anders Broman wrote: > Hi, > Didn't we make changes to the 1.x branch to make it compile with something > else than MSVC6? > As ian says why not try a recent version

Re: [Wireshark-dev] Facing Issue while compiling Wireshark on WindowsXP

2010-01-18 Thread Ian Schorr
Just curious - why are you trying to compile a 2 year old version? On Mon, Jan 18, 2010 at 7:24 PM, Varun Gupta wrote: > Hi All, > > > > I am trying to build wireshak 99.8.0 on my windows XP machine and facing an > issue. I am using MS Visual C++ 2005EE for building the code. > > While compiling

Re: [Wireshark-dev] read error: PacketReceivePacket failed

2010-01-15 Thread Ian Schorr
Why the "please report this to the wireshark developers" message then? On 16/01/2010, at 8:59 AM, Guy Harris wrote: > > On Jan 14, 2010, at 12:51 PM, Ing. Rodrigo Castro wrote: > >> Hi all. I am getting the following error: >> >> " >> Error while capturing packets: read error: PacketReceivePacke

Re: [Wireshark-dev] pinfo->fd->flags.visited and NFS

2010-01-14 Thread Ian Schorr
explit ASSERT but Wireshark is printing nothing to the console. Anyway, I've fixed all the bugs that are affecting processing of the NFSv4 replies I've been working with - now I need to work through the bugs affecting the calls. Fortunately the bugs aren't my code =) Thanks, Ia

Re: [Wireshark-dev] pinfo->fd->flags.visited and NFS

2010-01-13 Thread Ian Schorr
NFSv4 dissecting is doing at this point, it seems unusual. But I'll keep looking. Thanks for the tip. I'm still not clear on why your example is a problem though - what's the logic error in doing this test during an "if (tree)" block? Thanks, Ian __

[Wireshark-dev] pinfo->fd->flags.visited and NFS

2010-01-13 Thread Ian Schorr
more about how/when this flag would be changed, and what a dissector could that would lead to a "second processing pass" where this flag is set, I'd have a better chance of figuring out what I can do about the prob

Re: [Wireshark-dev] Fastest and the Legal way to distribute Custom Dissectors

2009-08-10 Thread Ian Schorr
#3 is probably the "best" if you're willing to share the source and think the code would be of use to others. Advantages: - Less work for you in the long run. - Each time a new release of Wireshark comes out with changes that you want, you'd need to release a newer version of your "custom" Wires

Re: [Wireshark-dev] The native MacOS X GTK port is in beta now

2008-10-21 Thread Ian Schorr
Very cool, I'll have to try it when I get home. Next big step would to make it a self-contained binarily-distributable appbundle =) On Wed, Oct 22, 2008 at 3:52 PM, Stephen Fisher <[EMAIL PROTECTED]>wrote: > The native MacOS X GTK port is now in beta and a easy to install > framework is availabl

Re: [Wireshark-dev] [Wireshark-users] Problem running Wireshark on Mac OS X Leopard 10.5.2

2008-08-20 Thread Ian Schorr
I suppose this thread probably would be better to send to the developer list at this point - so doing so. On Sat, Aug 16, 2008 at 6:21 PM, Ian Schorr <[EMAIL PROTECTED]> wrote: > Actually, now that I have a look at the Application Bundles... > > I see that in Wireshark 1.

[Wireshark-dev] Calea packet dissection in wireshark

2008-06-03 Thread Ian Brown
Regards, Ian ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

[Wireshark-dev] [PATCH] DMP - Fix for long SICs

2007-07-23 Thread BRUMBY, Ian
eason: An incorrect mask when decoding 4 character SICs (with characters [A-Z0-9]) results in data being lost: bytes = 3; value = (tvb_get_ntohl (tvb, offset) >> 8) & 0x1FF; The first line correctly indicates that there is 3 bytes worth of data, but the mask only caters for 2 b

Re: [Wireshark-dev] Controlling Tshark output format

2007-02-01 Thread Ian Schorr
This would be great. I've been wanting something like this for years. I've been getting by using the -z "proto,colinfo" option, but there are so many cases where it isn't ideal for scripted parsing or importing decoded output into other tools. This plus a more advanced MATE would be a dream com

[Wireshark-dev] New dissector - FMP

2007-01-31 Thread Ian Schorr
that need to be made (i.e. a handful of fields that aren't decoded) but the dissector is overall fairly complete and very usable. Let me know if there are questions or feedback, or otherwise if other info is needed (like sample captures, which I don't want to send out to the mailing list)

Re: [Wireshark-dev] Wireshark 0.99.4 totally hangs XP Pro SP2

2007-01-07 Thread Ian
On 1/6/07, Ulf Lamping < [EMAIL PROTECTED]> wrote: > > > > > Ian wrote: > > > I'm a Wireshark user and not a member of this list, so apologies if > > > posting as a non-member is inappropriate. I will subscribe to the list > > > if needs be.

[Wireshark-dev] Wireshark 0.99.4 totally hangs XP Pro SP2

2007-01-06 Thread Ian
rk is passing bad data to the WinPcap driver? Does anyone have any suggestions as to what I might try next? Many thanks Ian ___ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev

[Wireshark-dev] AJP13 Fixes

2006-07-19 Thread Ian Abel
Hi, The attached file should fix the following two bugs in the AJP dissector. 1) The dissector doesn't know about CPING/CPONG 2) The dissector misinterprets multiple requests in one connection if a prior request has a Body request part. Yours, Ian -- Ian Abel <[EMAIL PROTECTED]&