Re: [Wireshark-dev] Omnivorous Shark

2014-02-05 Thread Guy Harris
On Feb 5, 2014, at 12:21 AM, Michal Labedzki wrote: > I am thinking about formats without any magic numbers - format that > beginning with first packet, like binary Logcat/Logger > (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8279) or raw > media file like file contains only SBC frames (

Re: [Wireshark-dev] Omnivorous Shark

2014-02-05 Thread Michal Labedzki
On 4 February 2014 22:09, Guy Harris wrote: > in your examples with a format that has no magic number - that's what we > describe as "heuristics"; we don't consider checking for a magic number to be > a heuristic - that might be a better example. Replace it with ERF, I am thinking about format

Re: [Wireshark-dev] Omnivorous Shark

2014-02-04 Thread Guy Harris
On Feb 4, 2014, at 5:05 AM, Michal Labedzki wrote: > Also let think about cases: > 1. I think that my file is PCAP, but Wireshark opens cannot open it > --> Broken file > 2. I think that my file is PCAP, but Wireshark opens it as MP2T and it > seems that output is not correct --> Broken file? D

Re: [Wireshark-dev] Omnivorous Shark

2014-02-04 Thread Michal Labedzki
> On Jan 31, 2014, at 11:45 AM, mman...@netscape.net wrote: > 1. I like the fact that a "workaround" has been created for insufficient > heuristics. > I just hope it doesn't have the unintended consequence of weaker heuristics > being created. created for insufficient heuristics - that is right,

Re: [Wireshark-dev] Omnivorous Shark

2014-01-31 Thread Hadriel Kaplan
On Jan 31, 2014, at 11:45 AM, mman...@netscape.net wrote: > Without looking at the details of the patch, my thoughts are: > > 1. I like the fact that a "workaround" has been created for insufficient > heuristics. I just hope it doesn't have the unintended consequence of weaker > heuristics b

Re: [Wireshark-dev] Omnivorous Shark

2014-01-31 Thread Guy Harris
On Jan 31, 2014, at 5:13 AM, Michal Labedzki wrote: > Use case: For example heuristic for "mp2t" fail on file in format VWR > (VWR will be open as mp2t). Currently you are not able to open VWR in > this case. ...unless the VWR file's name ends with ".vwr" and you're opening it on the trunk, as

Re: [Wireshark-dev] Omnivorous Shark

2014-01-31 Thread mmann78
y" for separate applications. Michael -Original Message----- From: Michal Labedzki To: Developer support list for Wireshark Sent: Fri, Jan 31, 2014 8:15 am Subject: [Wireshark-dev] Omnivorous Shark Hello, There is a need to have a feedback about my propose of change (extend) ef

[Wireshark-dev] Omnivorous Shark

2014-01-31 Thread Michal Labedzki
Hello, There is a need to have a feedback about my propose of change (extend) default procedure of opening file in Wireshark. I propose add ability to choose format. Default behaviour is still "Automatic". New is component (GUI, list) where you can choose opening format. Use case: For example heu