[Wireshark-dev] Usb dissectors, usb.protocol is always 0x000000

2015-10-23 Thread [AvataR]
Hi list. I wrote trivial dissector (in lua, if it's matters) for MTP protocol for own use. Now I have a problem - how to apply it just for these packets. I reviewed sources and found out, that there is usb.protocol dissection table. I even found Still Image protocol in wireshark sources. The prob

Re: [Wireshark-dev] Usb dissectors, usb.protocol is always 0x000000

2015-10-23 Thread Pascal Quantin
2015-10-23 16:50 GMT+02:00 [AvataR] : > Hi list. > > I wrote trivial dissector (in lua, if it's matters) for MTP protocol > for own use. Now I have a problem - how to apply it just for these > packets. > > I reviewed sources and found out, that there is usb.protocol > dissection table. I even foun

Re: [Wireshark-dev] Usb dissectors, usb.protocol is always 0x000000

2015-10-23 Thread [AvataR]
> > Hi, > > ensure to capture the USB enumeration. This is required to fill those > fields. > > Best regards, > Pascal. > To be really sure, I start capture before plugging device to hub. There are enumeration, and descriptors are properly parsed. I can place pcap somewhere, if this may help. //

Re: [Wireshark-dev] Usb dissectors, usb.protocol is always 0x000000

2015-10-23 Thread Pascal Quantin
2015-10-23 17:30 GMT+02:00 [AvataR] : > > > > Hi, > > > > ensure to capture the USB enumeration. This is required to fill those > > fields. > > > > Best regards, > > Pascal. > > > > To be really sure, I start capture before plugging device to hub. > There are enumeration, and descriptors are prope

Re: [Wireshark-dev] GTP session plugin

2015-10-23 Thread Jeff Morriss
On 10/22/15 03:43, POZUELO Gloria (BCS/PSD) wrote: Hi all, I get in touch with you, since I would like to develop a new plugin for GTP protocol (V1 and V2 versions). This functionality would consists of looking for all messages that belongs to the same session. For instance: you select from 1 t

Re: [Wireshark-dev] Usb dissectors, usb.protocol is always 0x000000

2015-10-23 Thread Oleksii Shevchuk
Pascal Quantin writes: I tried wireshark in Debian Jessie (1.12) and on gentoo (1.12.8). Screenshot is here - https://alxchk.me/scr.png Dump is here - https://alxchk.me/dump.pcapng.gz // wbr // Oleksii Shevchuk > 2015-10-23 17:30 GMT+02:00 [AvataR] : > > > > > > Hi, > > > > ensure to captu