Re: [Wireshark-dev] tcpdump-workers mailing list troubles

2012-04-19 Thread Sam Roberts
On Wed, Apr 18, 2012 at 4:48 PM, abhinav narain wrote: > Please do so. my last two messages bounced back ! The MX for lists.tcpdump.org is cod.sandelman.ca, and it can't be pinged. So, list is down for everybody. Cheers, Sam ___

Re: [Wireshark-dev] tcpdump-workers mailing list troubles

2012-04-18 Thread Sam Roberts
For what its worth, the last message I saw was on Mar 13th, thought I have 2 or 3 more messages than I can see on http://news.gmane.org/gmane.network.tcpdump.devel I'm CCing tcpdump-workers, I'll see if I have the problem, too. Sam On Wed, Apr 18, 2012 at 1:52 PM, Christopher Maynard wrote: >

Re: [Wireshark-dev] [Wireshark-commits] rev 40436: /trunk-1.6/ /trunk-1.6/debian/: wireshark-common.files /trunk-1.6/epan/: Makefile.am /trunk-1.6/: make-version.pl /trunk-1.6/wiretap/: Makefile.am

2012-01-11 Thread Sam Roberts
On Wed, Jan 11, 2012 at 4:31 PM, Joerg Mayer wrote: > On Wed, Jan 11, 2012 at 05:00:57PM +, ger...@wireshark.org wrote: >> http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=40436 >> User: gerald >> Date: 2012/01/11 09:00 AM >> >> Log: >>  Have "make-version.pl -v" update the lib

[Wireshark-dev] mms support doesn't work in build from trunk

2011-12-17 Thread Sam Roberts
However, it does work in ubuntu 11.10's version. Basically, typing "mms" as a display filter finds nothing with my build, but finds the mms traffic with ubuntu's build. Probably, I don't have a dependency or build setting, but I've installed all the build-deps that I can tell, and puzzled over the

[Wireshark-dev] modbus exception code 0x04 is Slave Device Failure, but wireshark calls it Illegal Response Length

2011-11-29 Thread Sam Roberts
See page 49 of: http://www.modbus.org/docs/Modbus_Application_Protocol_V1_1b.pdf Cheers, Sam Index: epan/dissectors/packet-mbtcp.c === --- epan/dissectors/packet-mbtcp.c (revision 40042) +++ epan/dissectors/packet-mbtcp.c

Re: [Wireshark-dev] real time capture with a different application

2011-11-26 Thread Sam Roberts
On Fri, Nov 25, 2011 at 9:51 PM, vijay wrote: > Im trying to do a live capture of 802.15.4 tinyos traffic using > wireshark/tshark. I use another application which captures the traffic and > writes to a file. Search the list archive for a message with subject "How to send bytes to wireshark on ru

Re: [Wireshark-dev] Wireshark support for TinyOS packet format

2011-11-11 Thread Sam Roberts
> On Thu, Nov 10, 2011 at 1:34 PM, vijay wrote: >> >> Hi, >> Could some one tell me if wireshark can analyze packets from a TelosB mote >> (802.15.4 traffic) that uses TinyOS. Can you post a PCAP? Can you say what the protocols used are? Did you try to use wireshark, and if you did, what happened

Re: [Wireshark-dev] [tcpdump-workers] request for DLT_WIHART for Wireless HART

2011-07-05 Thread Sam Roberts
On Fri, Jun 26, 2009 at 3:30 PM, Guy Harris wrote: > On Jun 3, 2009, at 12:47 PM, Sam Roberts wrote: >> Wireless HART is a wireless industrial control protocol that uses the >> IEEE 802.15.4 physical layer, but_ NOT_ the IEEE data-link layer. >> >> The encapsulation

[Wireshark-dev] Any suggestions for using wireshark to capture/display interactions over netlink?

2011-03-09 Thread Sam Roberts
netlink is a linux IPC mechanism commonly used for complex interactions between userspace and the linux kernel. The API uses socket() with a PF_NETLINK, and sendfrom/recvfrom. Since it's IPC, there is no ethX device to pcap - I'm wondering if anybody knows of ways to watch netlink traffic? I coul

Re: [Wireshark-dev] Anyone heard of Netdude?

2011-02-07 Thread Sam Roberts
On Mon, Feb 7, 2011 at 11:36 AM, Gregory Seidman wrote: > Ah, interesting. Thanks for the info on netdude. I clearly disagree with > you in that I think Wireshark (the project, though not necessarily the > existing GUI) is the best possible place for packet editing. Modifying packets would involv

[Wireshark-dev] repeatable crash in tshark, but can't reproduce standalone

2009-06-19 Thread Sam Roberts
This isn't critical for us, and I haven't been able to reproduce it by running tshark standalone, and its an old tshark version... but I thought I'd report this in case anybody knows what's going on. We run tshark from inside a python/twisted exe, that's running as root. If I run from the command

Re: [Wireshark-dev] [Wireshark-users] bit operations aremissingfrom lua bindings?

2009-06-10 Thread Sam Roberts
2009/6/10 Stig Bjørlykke : > On Wed, Jun 10, 2009 at 1:06 AM, Sam Roberts wrote: >> Thank you for including the range and bitfield. >> Will this be in the next release? > > 1.2 is currently in feature freeze, so the range and bitfield have to wait. No problem, I won't r

Re: [Wireshark-dev] [Wireshark-users] bit operations aremissingfrom lua bindings?

2009-06-09 Thread Sam Roberts
On Mon, Jun 8, 2009 at 2:26 PM, Bálint Réczey wrote: > I forgot to add the __gc. > Feel free to add the __gc or change the userdata to contain uint itself. > I can't do it myself because I'm on holiday, far from my development machine. It's easier to work with 64-bit userdata if it doesn't need th

Re: [Wireshark-dev] [Wireshark-users] bit operations are missingfrom lua bindings?

2009-06-06 Thread Sam Roberts
2009/6/6 Stig Bjørlykke : > On Fri, Jun 5, 2009 at 10:37 PM, Sam Roberts wrote: >> Add this for up to 64 bit support, for completion: >> [...] > > I have this code locally, but as you noted the UInt64 type does not > work correctly.  The __tostring is not called when trying

[Wireshark-dev] patch for wslua to support getting ranges from ranges

2009-06-05 Thread Sam Roberts
Useful when you want to pull a buffer range out, and then parse that range. For example, packets like: uint16 count uint8 flag uint32 payload -- ... flag and payload is repeated count times It's nice to be able to pull each substructure out as a Tvbr, then pass it to a function that will parse i

Re: [Wireshark-dev] [Wireshark-users] bit operations are missingfrom lua bindings?

2009-06-05 Thread Sam Roberts
On Fri, Jun 5, 2009 at 11:14 AM, Sam Roberts wrote: > 2009/6/5 Stig Bjørlykke : >> On Fri, Jun 5, 2009 at 1:23 PM, Anders Broman >> wrote: >>> Couldn't: tvb_get_bits8(), tvb_get_bits16(), tvb_get_bits32(), >>> tvb_get_bits64() >>> Be used i

Re: [Wireshark-dev] [Wireshark-users] bit operations are missingfrom lua bindings?

2009-06-05 Thread Sam Roberts
2009/6/5 Stig Bjørlykke : > On Fri, Jun 5, 2009 at 1:23 PM, Anders Broman > wrote: >> Couldn't: tvb_get_bits8(), tvb_get_bits16(), tvb_get_bits32(), >> tvb_get_bits64() >> Be used instead? > > Good idea, then we can use any TvbRange to fetch a bitfield from. New > patch attached. I was surprise

Re: [Wireshark-dev] [Wireshark-users] bit operations are missing from lua bindings?

2009-06-05 Thread Sam Roberts
2009/6/4 Stig Bjørlykke : > On Thu, Jun 4, 2009 at 6:58 PM, Sam Roberts wrote: >> At least, I can't find any lua bindings for accessing bit fields, am I >> missing them? > > Wireshark has no bitwise operators implemented for Lua bindings yet, > so this is a correct o

[Wireshark-dev] [Wireshark-users] bit operations are missing from lua bindings?

2009-06-04 Thread Sam Roberts
2009/6/4 Stig Bjørlykke : > On Thu, Jun 4, 2009 at 6:58 PM, Sam Roberts wrote: >> At least, I can't find any lua bindings for accessing bit fields, am I >> missing them? > > Wireshark has no bitwise operators implemented for Lua bindings yet, > so this is a correct o