gmane.network.wireshark.user

OSPF LS Aging Field - Output Question

Barry Constantine — 2008-09-06T11:55:48

Betr: Wireshark Window Size

2008-09-05T21:24:22

Hi Eric, The window size is in bytes. Maybe this information can help you: http://en.wikipedia.org/wiki/Transmission_Control_Protocol http://en.wikipedia.org/wiki/Transmission_Control_Protocol#Flow_control Grtz Joan

Wireshark Window Size

eric ferro — 2008-09-05T18:30:58

Re: New dissector IEC 60870-5-104

Anders Broman — 2008-09-05T14:47:46

Hi, Better upload the patch in .gz or .zip format. Change comments from Spanish to English. Try to use proto_tree_add_item() as much as possible. Are the things found at a glance. Regards Anders -----Original Message----- From: wireshark-users-bounces-IZ8446WsY0/dtAWm4Da02A< at >public.gmane.org [mailto:wireshark-users-bounces< at >wireshark.org] On Behalf Of joan-30cG2PUby8ReoWH0uzbU5w< at >public.gmane.org Sent: den 5 september 2008 13:48 To: wireshark-users-IZ8446WsY0/dtAWm4Da02A< at >public.gmane.org Subject: [Wireshark-users] New dissector IEC 60870-5-104 Hello, I posted a new dissector 7 days ago. Is it forgotten or if someone is still looking at it. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2840 I fuzzy tested the dissector with the attached example. Regards, Joan Ramió. _______________________________________________ Wireshark-users mailing list Wireshark-users-IZ8446WsY0/dtAWm4Da02A< at >public.gmane.org https://wireshark.org/mailman/listinfo/wireshark-users

New dissector IEC 60870-5-104

2008-09-05T11:48:22

Hello, I posted a new dissector 7 days ago. Is it forgotten or if someone is still looking at it. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2840 I fuzzy tested the dissector with the attached example. Regards, Joan Ramió.

Re: TCP Window Sizes

Aaron Allen — 2008-09-05T13:45:01

Re: loading user specified decodes

Zoran Bošnjak — 2008-09-05T13:07:23

My script loads with no errors, but it does nothing. What is wrong? The script gets executed for sure. If I print out "asterix" variable, it says "Asterix", which is OK, but after wireshark starts the user specific decode table is empty. Here is my script (set_asterix.lua)

Re: TCP Window Sizes

Frank Bulk — 2008-09-05T03:50:27

Re: Problem running Wireshark on Mac OS X Leopard10.5.2

Christian MacNevin — 2008-09-04T20:11:35

Um, this may sound stupid, but why not just put the missing stuff back in the package? Was it prohibitively bulky or something? On Sep 4, 2008, at 12:50 PM, Gerald Combs wrote: Ian Schorr wrote: The 1.0.0 .dmg was built on a system using MacPorts, and the 1.0.2 .dmg was built using Fink, which may be the reason for this. We should probably take a look at Imendio's "Ige Mac Bundler": http://ftp.imendio.com/pub/imendio/ige-mac-bundler/, which is supposed to sidestep issues like this by compiling its own GTK+ environment. There haven't been any changes to the OS X packaging environment between 1.0.2 and 1.0.3. _______________________________________________ Wireshark-users mailing list Wireshark-users-IZ8446WsY0/dtAWm4Da02A< at >public.gmane.org https://wireshark.org/mailman/listinfo/wireshark-users

Re: Problem running Wireshark on Mac OS X Leopard 10.5.2

Gerald Combs — 2008-09-04T19:50:51

The 1.0.0 .dmg was built on a system using MacPorts, and the 1.0.2 .dmg was built using Fink, which may be the reason for this. We should probably take a look at Imendio's "Ige Mac Bundler": http://ftp.imendio.com/pub/imendio/ige-mac-bundler/, which is supposed to sidestep issues like this by compiling its own GTK+ environment. There haven't been any changes to the OS X packaging environment between 1.0.2 and 1.0.3.

Re: Question

sandeep nitta — 2008-09-04T17:18:30

using Tshark to get Wireshark analysis reports

Terry Martin — 2008-09-04T16:29:32

Re: Question

Terry Martin — 2008-09-04T15:55:49

TCP Window Sizes

Aaron Allen — 2008-09-04T14:12:31

Re: Filtering SCTP message contents

Guy Harris — 2008-09-04T07:23:52

On Sep 4, 2008, at 12:02 AM, Guy Harris wrote: (Luis, is there a way MATE could do this?)

Re: Filtering SCTP message contents

Guy Harris — 2008-09-04T07:02:35

On Sep 3, 2008, at 11:42 PM, Emre UZUNCA wrote: Unfortunately, no. This can't be handled by the proposed {n} operator, unless you allow that operator to have "n" in it rather than just specific numbers, e.g. m3ua{n}.protocol_data_opc == 10000 && m3ua{n}.protocol_data_dpc == 10001 where "n" is what's used there, rather than a specific number. (I attached the {n} to "m3ua" rather than to "protocol_data_opc" - I could imagine, for example, protocol A, a single PDU of which can contain one or more PDUs of protocol B, and where a PDU of protocol B could contain multiple instances of field C - the expression "B{2}.C == 15" would match if any of the instances of C in the 2nd protocol-B PDU are equal to 15, while "B.C{2} == 15" would match if the 2nd instance of C in any of the protocol-B PDUs is equal to 15.)

Filtering SCTP message contents

Emre UZUNCA — 2008-09-04T06:42:13

Re: Problem running Wireshark on Mac OS X Leopard10.5.2

Ian Schorr — 2008-09-04T05:08:42

Wireshark 1.0.3 is now available

Gerald Combs — 2008-09-04T04:52:41

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm proud to announce the release of Wireshark 1.0.3. What is Wireshark? Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. What's New Bug Fixes The following vulnerabilities have been fixed. See the security advisory for details and a workaround. o The NCP dissector was susceptible to a number of problems, including buffer overflows and an infinite loop. Versions affected: 0.9.7 to 1.0.2 o Wireshark could crash while uncompressing zlib-compressed packet data. Versions affected: 0.10.14 to 1.0.2 o Wireshark could crash while reading a Tektronix .rf5 file. Versions affected: 0.99.6 to 1.0.2 The following bugs have been fixed: o 802.11 WPA/WPA2-PSK Unable to decode Group Keys. (Bug 1420) o Packets could wrongly be dissected as "Redback Lawful Intercept" (Bug 2376) o MIKEY diss

Re: How do I use the decryption support inWireshark?

ronnie sahlberg — 2008-09-04T04:44:43

Wireshark supports many different types of decryption for different protocols. Which protocol are you trying to decrypt? On Thu, Sep 4, 2008 at 1:14 PM, David Finestein public.gmane.org> wrote:

How do I use the decryption support in Wireshark?

David Finestein — 2008-09-04T03:14:31

Hi, I've been wondering how to use the decryption support in Wireshark. Can anyone tell me how to use it or tell me where to find it in the app. Thanks, David Finestein