Re: [Wireshark-dev] Conversation and TCP reassembly

2008-08-01 Thread Jens Steinhauser
I do the following to create only one conversation per "Configuration Frame": if (config_frame && !pinfo->fd->flags.visited) { data = extract_data(...); conversation = conversation_new(...); conversation_add_proto_data(conversation, proto_handle, data); } An example of what's goin

Re: [Wireshark-dev] Conversation and TCP reassembly

2008-08-01 Thread didier
Hi, Le vendredi 01 août 2008 à 10:52 +0200, Jens Steinhauser a écrit : > I do the following to create only one conversation per "Configuration > Frame": > > if (config_frame && !pinfo->fd->flags.visited) { > data = extract_data(...); > conversation = conversation_new(...); > convers

[Wireshark-dev] Fw: help needed regarding decrypting the ssl

2008-08-01 Thread prashanth joshi
--- On Fri, 8/1/08, prashanth joshi <[EMAIL PROTECTED]> wrote: From: prashanth joshi <[EMAIL PROTECTED]> Subject: help needed regarding decrypting the ssl To: wireshark-dev@wireshark.org Date: Friday, August 1, 2008, 4:28 AM Hi all, I need to work on decrypting the ssl. I am not aupposed to use

[Wireshark-dev] help needed regarding decrypting the ssl

2008-08-01 Thread prashanth joshi
Hi all, I need to work on decrypting the ssl. I am not aupposed to use the Man in the middle attack. I need to implement the ssl decrypter on a machine that acts as a sniffer. I can have the information from the server as the requirement is for a server internal to the company The server certific

[Wireshark-dev] buildbot failure in Wireshark (development) on OSX-10.5-x86

2008-08-01 Thread buildbot-no-reply
The Buildbot has detected a new failure of OSX-10.5-x86 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/OSX-10.5-x86/builds/502 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: osx-10.5-x86 Build Reason: Buil

[Wireshark-dev] nsec Timestamp Resolution

2008-08-01 Thread Barry Constantine
Hello, I was reading on the Wireshark wiki that pcap can support nsec timestamps (versus usec) and that Wireshark supports this time display. Can anyone comment if they have tried this out with an analyzer / capture device that supports nsec timestamps? My company builds a analyzer th

Re: [Wireshark-dev] help needed regarding decrypting the ssl

2008-08-01 Thread Paolo Abeni
hello, On Fri, 2008-08-01 at 02:28 -0700, prashanth joshi wrote: > The definition of the TLS says that the client sends it randon number > during client hello and the server sends its random number during the > server hello. However in Diffie-Hellman algorithm the client keeps its > random number

Re: [Wireshark-dev] Conversation and TCP reassembly

2008-08-01 Thread Jens Steinhauser
Ok, I rewrote the code to reuse a conversation that already exists. Works fine now. The example in 2.2.3 in README.developer gave me the illusion that is's no problem have/create multiple conversations. Thanks for your help! > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EM

[Wireshark-dev] buildbot failure in Wireshark (development) on OSX-10.5-x86

2008-08-01 Thread buildbot-no-reply
The Buildbot has detected a new failure of OSX-10.5-x86 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/OSX-10.5-x86/builds/507 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: osx-10.5-x86 Build Reason: Buil

Re: [Wireshark-dev] nsec Timestamp Resolution

2008-08-01 Thread Guy Harris
On Jul 31, 2008, at 10:34 AM, Barry Constantine wrote: > My company builds a analyzer that provides nsec timestamps and when > I convert our format to pcap (with Wild Packets ProConvert), I > suspect that the conversion is dropping the nsec time since when I > open in Wireshark, I only see

[Wireshark-dev] Tshark-1.0.2 cores SIGABRT child capture process died

2008-08-01 Thread Moheed Moheed Ahmad
Hi, I am seeing following core while using tshark-1.0.2 (core attachement removed :( I had it, let me know if I can create a bug to trace it, will attach the core their) Most likely its issue with dumpcap don't handles Signals appropriately. Is it known issue, if yes, is there any workaround?

[Wireshark-dev] buildbot failure in Wireshark (development) on Windows-XP-x86

2008-08-01 Thread buildbot-no-reply
The Buildbot has detected a new failure of Windows-XP-x86 on Wireshark (development). Full details are available at: http://buildbot.wireshark.org/trunk/builders/Windows-XP-x86/builds/4640 Buildbot URL: http://buildbot.wireshark.org/trunk/ Buildslave for this Build: windows-xp-x86 Build Reason