Re: [Wireshark-dev] bytes

While trying to write a protocol dissector for a pseudo protocol , I used this and it did work. The packet (generated manually using text2pcap) had data in hex , and the field value in the display was also getting displayed in hex . So I did not do any special formatting for it .I think due to the

Re: [Wireshark-dev] bytes

You may try the following proto_tree_add_item(xxx_tree, hf_xxx_abc,parameter_tvb, param_offset, 9, FALSE); { &hf_xxx_abc, {"ABC", "xxx.abc", FT_BYTES, BASE_DEC, NULL, 0x0,"", HFILL }}, Hopefully the above will help you display the 9 bytes . -Original Me

[Wireshark-dev] Help for calling one dissector from another dissector

Hi , This is regarding my mail with the title "DTAP dissector not getting called from my dissector" posted on 24 May 2007 . Could anyone please suggest a solution to it , I'm still struggling with the display . Regards , Vikash The information contained in this electronic message and any

[Wireshark-dev] DTAP dissector not getting called from my dissector

Hi , I've developed a dissector for understanding the wireshark , using an imaginary "test" protocol. But I'm facing a problem with it . When I try to call another dissector ( I'm calling "gsm_a_dtap") , I'm not getting any display for the wireshark gui . The bytes related to dtap are not at all

[Wireshark-dev] Info column problem continued

Hi , This mail is with reference to my mail send on 20th. April 2007 with the title "Info column display problem". I have written a dissector which is for a proprietary protocol. It is getting dissected well , but I'm only facing problem with the display in "info" column. When I load my pack

[Wireshark-dev] Info column display problem

Hi , I'm using a 64-bit system and am facing a problem with the display for the "info" column. I'm having a statement as below in my code still the "info" column does not display anything . if (check_col(pinfo->cinfo, COL_INFO)){ col_set_str(pinfo->cinfo, COL_INFO, "XXX ");

[Wireshark-dev] building rpm gives error

Hi, I have added my plugin to wireshark.Now I need to build RPM with the name I wants.I did the following steps for it. 1.Modified packaging/rpm/SPECS/wireshark.spec.in and added the required name in Name field 2.Modified configure file and # Define the identity of the package PACKAGE=wiresh

[Wireshark-dev] error during rpm installation

Hi , I've generated an rpm from the wireshark source code . The rpm was generated successfully , I used "make rpm-package". But when I install it using "rpm -ivh " command I'm getting the following error . file /usr/lib/libwiretap.so.0.0.1 from install of wireshark-0.99.3a-2 conflicts with fi

[Wireshark-dev] Runtime error OOPs

Hi , I've written a dissector for my protocol. It's compiling fine but while executing it gives the following error OOPS: ',' in 'introip_app_tra_prm_ext3,' Unhandled exception ("proto.c:3607: failed assertion "((*__ctype_b_loc ())[(int) ((c))] & (unsigned short int) _ISalnum) || c == '-' ||

[Wireshark-dev] How to represent range values using range_string

Hi , I had mailed to the forum regarding how to use range_string , but not received any reply yet . Could anyone please provide any suggestion to this regard . Note : this mail is in reference to mail titled "range_string problem" . Regards , Vikash The information contained in this elect

[Wireshark-dev] range_string problem

Hi , I've tried to use range_string in my dissector in the following way , but it's giving an error . { &hf_xyz_vlr_cfdata_ncrt, {"No reply condition time", "xyz.vlr_cfdata_ncrt",FT_UINT8, BASE_DEC, RVALS(vlr_cfdata_nrct_rvals), 0x0,"", HFILL }}, static const ra

[Wireshark-dev] proto_tree_add_item problem

Hi , I've developed a dissector and it has one statement as : proto_tree_add_item(proto_tree, hf_xyz_any_field, tvb, offset, 16, FALSE); This statement is not getting executed , the wireshark is giving error " malformed packet ". But when I'm changing the length ( 16 ) to smaller value ,

[Wireshark-dev] text2pcap once again

Hi Guy Harris , armed with what you've learned from that book about the format of Ethernet headers and IP headers, look at the first 14 bytes of data in the packet (you'll now know how that produces the display Thanks for the above suggestion especially the book. But I'm already awar

[Wireshark-dev] text2pcap help needed

Hi , I tried writing a file "test", whose contents were (this is taken from man page for text2pcap): 00 00 e0 1e a7 05 6f 00 10 08 5a a0 b9 12 08 00 46 00 10 03 68 00 00 00 00 0a 2e 18 ee 33 0f 19 08 7f 0f 19 20 03 80 94 04 00 00 10 01 28 16 a2 0

[Wireshark-dev] text file as input to wireshark

Hi , I've written a dissector for my own protocol .This is just to enhance my understanding of writing dissectors . I've completed coding and now I wish to test my dissector. But as it is an imaginary protocol , I cannot get the packets for it . I wish to test it by writing a text file and passi

[Wireshark-dev] How to dissect bit information??

Hello , While writing a dissector for my protocol I'm stuck up at a point . The description of my problem is provided below : Suppose my packet is like : __ | 7 | 6 | 5 | 4 |3

[Wireshark-dev] Information on " packet generator tool " needed

Hello , I've developed a plug-in based upon a proprietary protocol , but testing it has become an issue for me as I don't have the live setup to generate the packets for that protocol . Can anyone suggest me whether there is any tool which would generate packets for my proprietary protocol . N

[Wireshark-dev] How the display tree gets built ?

Hi ,   While going through the README.developer file , I was trying to understand the tree concept but could not grasp much . Can anyone please provide some inputs to help me understand how the tree nodes are added and display tree gets built .   Regards , Vikash The information containe

[Wireshark-dev] protocol on top of SUA layer

Hi ,   I'm trying to write a dissector for a protocol which runs atop SUA layer . Can anyone tell me if any such protocol which runs over SUA layer has been implemented in wireshark ( ethereal ).   Regards , Vikash The information contained in this electronic message and any attachments t