Re: [Wireshark-dev] Question to a proprietary capture engine

2011-08-08 Thread Lange, Jan-Erik
: [Wireshark-dev] Question to a proprietary capture engine On Mon, Aug 08, 2011 at 10:49:49AM +0200, Lange, Jan-Erik wrote: > Can you tell me where I can get further information about > realizing how to capture packets with a proprietary driver or > software without the use of the capture engine

[Wireshark-dev] Question to a proprietary capture engine

2011-08-08 Thread Lange, Jan-Erik
Hello, I analyze data that I sniff with a FPGA. To get the data from the FPGA to the computer I use USB transmission with the cypress fx2. In the past I transferred the data via libusb to my computer and saved the raw data to disk and converted it with a tool to the pcap-file format. Now I wan

Re: [Wireshark-dev] switch between protocols

2010-12-08 Thread Lange Jan-Erik
topher Maynard wrote: > Lange Jan-Erik writes: > >> Dependent on the value of a type field I want to dissect a packet with > protocol A or protocol B. >> >> Is this a typical application for the use of a heuristic dissector? Or how >> can > I realize the switch

[Wireshark-dev] switch between protocols

2010-12-08 Thread Lange Jan-Erik
Hello, Dependent on the value of a type field I want to dissect a packet with protocol A or protocol B. Is this a typical application for the use of a heuristic dissector? Or how can I realize the switch between the to protocolls? Best regards Jan-Erik

Re: [Wireshark-dev] protocol field declaration

2010-11-21 Thread Lange Jan-Erik
] Gesendet: Freitag, 19. November 2010 18:49 An: Developer support list for Wireshark Betreff: Re: [Wireshark-dev] protocol field declaration On Fri, Nov 19, 2010 at 01:28:39PM +0100, Lange Jan-Erik wrote: > I want to have a field in my protocol, that is 18,25 Bytes long (18 > Bytes and

Re: [Wireshark-dev] protocol field declaration

2010-11-20 Thread Lange Jan-Erik
Stephen Fisher [st...@stephen-fisher.com] Gesendet: Freitag, 19. November 2010 18:49 An: Developer support list for Wireshark Betreff: Re: [Wireshark-dev] protocol field declaration On Fri, Nov 19, 2010 at 01:28:39PM +0100, Lange Jan-Erik wrote: > I want to have a field in my protocol, that is 18

[Wireshark-dev] protocol field declaration

2010-11-19 Thread Lange Jan-Erik
Hello, I want to have a field in my protocol, that is 18,25 Bytes long (18 Bytes and 2 Bits aditionally). Which type can I use therefore? When I use FT_BYTES I can't use bitmasking for getting the 2 Bits. And Using FT_INT64 is too short for 18 Bytes. How can I realize this field? Best regards

Re: [Wireshark-dev] adding an encap_type_info element

2010-11-18 Thread Lange Jan-Erik
I solved it using WTAP_ENCAP_USER0. ..I think a better solution was it if i could declare a really new "link type". But I think it is going well this way. Von: wireshark-dev-boun...@wireshark.org [wireshark-dev-boun...@wireshark.org] im Auftrag von

[Wireshark-dev] adding an encap_type_info element

2010-11-18 Thread Lange Jan-Erik
Hello, I want to dissect a packet that is not ethernet compliant. In the following I decribe the strategy to realize this. Can you tell me where I'm wrong? 1. I have to add a new encap_type_info element to the encap_table_base[] struct in the wtap.c file. /* WTAP_ENCAP_MYPHYLAYER */ { "My Phy

Re: [Wireshark-dev] foo dissector of the dev guide

2010-11-18 Thread Lange Jan-Erik
16 An: Developer support list for Wireshark; wireshark-dev@wireshark.org Betreff: Re: [Wireshark-dev] foo dissector of the dev guide Original-Nachricht > Datum: Thu, 18 Nov 2010 11:22:19 +0100 > Von: Lange Jan-Erik > An: Developer support list for Wireshark > Betreff: R

Re: [Wireshark-dev] foo dissector of the dev guide

2010-11-18 Thread Lange Jan-Erik
Guy Harris [...@alum.mit.edu] Gesendet: Donnerstag, 18. November 2010 04:59 An: Developer support list for Wireshark Betreff: Re: [Wireshark-dev] foo dissector of the dev guide On Nov 16, 2010, at 2:16 AM, Lange Jan-Erik wrote: I want to try the example dissector out of the dev guide of wires

Re: [Wireshark-dev] foo dissector of the dev guide

2010-11-17 Thread Lange Jan-Erik
sendet: Dienstag, 16. November 2010 13:06 An: Developer support list for Wireshark Betreff: Re: [Wireshark-dev] foo dissector of the dev guide Hi, have you disabled the UDP dissector? Thanks, Jaap On Tue, 16 Nov 2010 11:16:20 +0100, Lange Jan-Erik wrote: Hallo, I want to try the exa

Re: [Wireshark-dev] foo dissector of the dev guide

2010-11-16 Thread Lange Jan-Erik
13:06 An: Developer support list for Wireshark Betreff: Re: [Wireshark-dev] foo dissector of the dev guide Hi, have you disabled the UDP dissector? Thanks, Jaap On Tue, 16 Nov 2010 11:16:20 +0100, Lange Jan-Erik wrote: Hallo, I want to try the example dissector out of the dev

Re: [Wireshark-dev] foo dissector of the dev guide

2010-11-16 Thread Lange Jan-Erik
Betreff: Re: [Wireshark-dev] foo dissector of the dev guide Hi, have you disabled the UDP dissector? Thanks, Jaap On Tue, 16 Nov 2010 11:16:20 +0100, Lange Jan-Erik wrote: Hallo, I want to try the example dissector out of the dev guide of wireshark. The dissector works with UDP on port

Re: [Wireshark-dev] compiling dissector plugin

2010-11-06 Thread Lange Jan-Erik
chris.mayn...@gtech.com] Gesendet: Freitag, 5. November 2010 15:47 An: wireshark-dev@wireshark.org Betreff: Re: [Wireshark-dev] compiling dissector plugin Lange Jan-Erik writes: > now I'm using linux for creating a wireshark dissector. Compiling Wireshark on Windows 7 64-bit is too >

[Wireshark-dev] compiling dissector plugin

2010-11-05 Thread Lange Jan-Erik
Hello, now I'm using linux for creating a wireshark dissector. Compiling Wireshark on Windows 7 64-bit is too strange for me. Compiling wireshark finished with no errors. Now I created a dissector as decribed on http://www.wireshark.org/docs/wsdg_html_chunked/ChDissectAdd.html I put the files

Re: [Wireshark-dev] nmake problem (cl.exe)

2010-11-03 Thread Lange Jan-Erik
2010 22:03 An: wireshark-dev@wireshark.org Betreff: Re: [Wireshark-dev] nmake problem (cl.exe) Lange Jan-Erik writes: > I have Windows 7 64bit on my computer. > > Error 1719. The windows Installer Service could not be accessed. This can occur if you are running Windows > in safe m

Re: [Wireshark-dev] nmake problem (cl.exe)

2010-11-02 Thread Lange Jan-Erik
Christopher Maynard [chris.mayn...@gtech.com] Gesendet: Dienstag, 26. Oktober 2010 20:33 An: wireshark-dev@wireshark.org Betreff: Re: [Wireshark-dev] nmake problem (cl.exe) Lange Jan-Erik writes: > I have Windows7 x64. Perhaps the SDK doesn't support it? The information at http://www.codeprojec

Re: [Wireshark-dev] nmake problem (cl.exe)

2010-10-26 Thread Lange Jan-Erik
problem (cl.exe) Lange Jan-Erik writes: >> cl -WX -D_U_="" /Zi /W3 /MD /D_CRT_SECURE_NO_DEPRECATE /D_CRT_NONSTDC_NO_DEPRECATE /DWIN32_LEAN_AND_MEAN /DMSC_VER_REQUIRED=1500 /D_BIND_TO_CURRENT_CRT_VERSION=1 /MP lemon.c > > > > causes the error > > > > cl: C

[Wireshark-dev] nmake problem (cl.exe)

2010-10-23 Thread Lange Jan-Erik
Hello, compiling wireshark under windows I get some errors. I'm using the manual from http://www.codeproject.com/KB/IP/custom_dissector.aspx I installed all required programs. There were some errors, where I had to rename some files like which.exe or unzip.exe because they were included in other

[Wireshark-dev] dissector-plugins

2010-10-14 Thread Lange Jan-Erik
Hello, there is the posibility in wireshark to create a "dissector-plugin". I want to dissect a packet which is not even conform to the ethernet protocol. Is it possible to create such a dissector plugin in this "low level"? Best regards Jan _

Re: [Wireshark-dev] saving data in pcap file format

2010-10-11 Thread Lange Jan-Erik
Auftrag von Lange Jan-Erik [jan-erik.la...@haw-hamburg.de] Gesendet: Montag, 11. Oktober 2010 19:42 An: Developer support list for Wireshark Betreff: Re: [Wireshark-dev] saving data in pcap file format I'm working on a WinXP PC. Usbmon is not possible because of this, isn

Re: [Wireshark-dev] saving data in pcap file format

2010-10-11 Thread Lange Jan-Erik
0 16:31 An: wireshark-dev@wireshark.org Betreff: Re: [Wireshark-dev] saving data in pcap file format Lange Jan-Erik writes: > I want to analyze an usb datastream with wireshark. To record the data I use a proprietary development that uses libusb to receive the data. > Have you looked in

Re: [Wireshark-dev] saving data in pcap file format

2010-10-11 Thread Lange Jan-Erik
k-dev-boun...@wireshark.org [wireshark-dev-boun...@wireshark.org] im Auftrag von Gregory Seidman [gsslist+wiresh...@anthropohedron.net] Gesendet: Montag, 11. Oktober 2010 13:53 An: wireshark-dev@wireshark.org Betreff: Re: [Wireshark-dev] saving data in pcap file format On Mon, Oct 11, 2010 at 01:35:17PM +0200,

[Wireshark-dev] saving data in pcap file format

2010-10-11 Thread Lange Jan-Erik
Hello, I want to analyze an usb datastream with wireshark. To record the data I use a proprietary development that uses libusb to receive the data. Ok, to analyze the data I want to use wireshark. Is there a way to save the recorded data as a *.pcap File? Is there a library I could use to write