Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] Naive attempt to dissect.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Anders Broman" <a.broman@xxxxxxxxx>
Date: Tue, 7 Oct 2008 21:19:34 +0200

Hi,
Ok
- The way to do it is to edit the .cnf file in asn1/gsmmap and
Re build the gsm_map dissector with asn2wrs (run nmake -f makefile.nmake
gsmmap in the asn1 dir and copy the resulting packet-gsm_map.[ch] to
epan/dissectors.

I suspect that this is a complete dtap message, if that’s the case
You should copy the message to a new tvb and call the dtap dissector 
with that tvb(packet-gsm_a_dtap.c).
Regards
Anders

-----Ursprungligt meddelande-----
Från: wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] För Bruno Hivert
Skickat: den 7 oktober 2008 21:07
Till: 'Developer support list for Wireshark'
Ämne: Re: [Wireshark-dev] Naive attempt to dissect.

Er, well, I'n not sure I can post the packet because of (insert legalese FUD
here). And editing out some info is going to be a PITA (who knows how to
recalculate all the checksum, index, etc on all layers...)

However, If I have the time to figure out proper decoding, I can certainly
send a patch. When I looked at the code, there was certainly some TODO
lingering there.

/Bruno

-----Original Message-----
From: wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Anders Broman
Sent: October 7, 2008 14:36
To: 'Developer support list for Wireshark'
Subject: Re: [Wireshark-dev] Naive attempt to dissect.

Hi,
If you could post the packet it might be trivial to fix "proper" decoding.
Regards
Anders

-----Ursprungligt meddelande-----
Från: wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] För Jeff Morriss
Skickat: den 7 oktober 2008 19:24
Till: Developer support list for Wireshark
Ämne: Re: [Wireshark-dev] Naive attempt to dissect.



Bruno Hivert wrote:
> Hello,
> 
> I’m trying some very simple decoding for gsm-map packets. It’s very 
> simple, because the dissector I need already exists, it’s just not 
> called in the proper context.
> 
> If you have a look at the attached diff file, you’ll understand what I’m 
> trying to do.
> 
> However, I cannot even try this apparently trivial-as-an-API-call 
> modification, because it does not compile.
[...]
> epan/.libs/libwireshark.so: undefined reference to `de_bearer_cap'

[...]

> What am I doing wrong, and where can I express the dependency without 
> pulling way to many things in ?

The basic problem is that de_bearer_cap() is declared as static in 
packet-gsm_a_dtap.c: that means no other module (.c file) can use it. 
If you remove the keyword "static" it will at least link.  (Of course it 
would also be better to have a prototype in a header file, etc.)

_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-dev

_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-dev




_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-dev


  • References:
    • [Wireshark-dev] Naive attempt to dissect.
      • From: Bruno Hivert
    • Re: [Wireshark-dev] Naive attempt to dissect.
      • From: Jeff Morriss
    • Re: [Wireshark-dev] Naive attempt to dissect.
      • From: Anders Broman
    • Re: [Wireshark-dev] Naive attempt to dissect.
      • From: Bruno Hivert
  • Prev by Date: Re: [Wireshark-dev] Error while setting up check-out of code
  • Next by Date: [Wireshark-dev] Problems to Update GTK2/Glib in 1.0.4
  • Previous by thread: Re: [Wireshark-dev] Naive attempt to dissect.
  • Next by thread: [Wireshark-dev] Problems to Update GTK2/Glib in 1.0.4
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation