Wireshark mailing list archives
Re: Stats/tap plugin problem
From: Floris van Nee <floris.vannee () gmail com>
Date: Mon, 26 Jul 2010 21:32:06 -0700
Okay, thanks for your help. It is greatly appreciated. I still haven't fixed it though.. I wonder if there's a way to link with libui.lib, because I presume the definition is in there. I haven't been able to do so without linking errors though. Floris On Mon, Jul 26, 2010 at 6:39 PM, Maynard, Chris < Christopher.Maynard () gtech com> wrote:
OK, I had assumed register_dfilter_stat was defined in one of the .cfiles in epan/ that’s already part of libwireshark.dll, but it’s not; it’s in gtk/tap_dfilter_dlg.c. My apologies. I’m not sure how to solve your problem. - Chris *From:* wireshark-dev-bounces () wireshark org [mailto: wireshark-dev-bounces () wireshark org] *On Behalf Of *Floris van Nee *Sent:* Monday, July 26, 2010 9:03 PM *To:* Developer support list for Wireshark *Subject:* Re: [Wireshark-dev] Stats/tap plugin problem Thanks for the suggestion. This leads to a similar error when trying to compile Wireshark though: libwireshark.def : error LNK2001: unresolved external symbol register_dfilter_st at libwireshark.lib : fatal error LNK1120: 1 unresolved externals NMAKE : fatal error U1077: '"C:\Program Files (x86)\Microsoft Visual Studio 9.0\ VC\BIN\link.EXE"' : return code '0x460' Stop. NMAKE : fatal error U1077: '"C:\Program Files (x86)\Microsoft Visual Studio 9.0\ VC\BIN\nmake.exe"' : return code '0x2' I'm not sure what this means. Maybe the file also needs to be included somewhere else? -Floris On Mon, Jul 26, 2010 at 5:35 PM, Maynard, Chris < Christopher.Maynard () gtech com> wrote: Did you try adding register_dfilter_stat to epan/libwireshark.def? - Chris *From:* wireshark-dev-bounces () wireshark org [mailto: wireshark-dev-bounces () wireshark org] *On Behalf Of *Floris van Nee *Sent:* Monday, July 26, 2010 5:23 PM *To:* wireshark-dev () wireshark org *Subject:* Re: [Wireshark-dev] Stats/tap plugin problem To partially answer my own question: it seems that by bypassing stats_tree you can manually register to listen to a tap. Here it is possible to specify that you want the complete tree to be build (the flags parameter of function register_tap_listener). Here arises another problem though, because by not using the stats_tree functions, I don't have the nice GUI interface by default and can't use the tick and count functions etc. By looking at the source, h225_ras_srt.c, for example, I noticed that it is possible to manually build this GUI. However, so far I haven't been able to get something like that to compile as a plugin (Windows machine). First it complained that it couldn't find some GTK includes. This could be fixed by changing the makefile to this (add GTK_CFLAGS): CFLAGS=/WX /DHAVE_CONFIG_H /I../.. $(GTK_CFLAGS) \ $(GLIB_CFLAGS) \ /I$(PCAP_DIR)\include -D_U_="" $(LOCAL_CFLAGS) But after this a linking error occurred which I haven't been able to fix (see below). It can't find the call to register_dfilter_stat. I tried linking with libui.lib (which is the lib in the gtk folder), though this only made things worse and gave tons of linking errors. Does anyone here have any ideas how to include GUIs in a plugin? Thanks, Floris link -dll /out:test.dll /NOLOGO /INCREMENTAL:no /DEBUG /MACHINE:x86 /MAN IFEST:no test.obj p_test.obj q1.obj ..\..\epan\libwireshark.lib C:\w ireshark-win32-libs-1.2\gtk2\lib\glib-2.0.lib C:\wireshark-win32-libs-1.2\gtk2\ lib\gmodule-2.0.lib C:\wireshark-win32-libs-1.2\gtk2\lib\gobject-2.0.lib test.r es Creating library test.lib and object test.exp p_test.obj : error LNK2019: unresolved external symbol _register_dfilter_stat re ferenced in function _register_tap_listener_gtk_test test.dll : fatal error LNK1120: 1 unresolved externals NMAKE : fatal error U1077: '"C:\Program Files (x86)\Microsoft Visual Studio 9.0\ VC\BIN\link.EXE"' : return code '0x460' On Mon, Jul 26, 2010 at 10:32 AM, Floris van Nee <floris.vannee () gmail com> wrote: Hi, I am trying to make a plugin for Wireshark which makes some statistics about captured packets. The basic things work: it can count packets, use the tap to send information collected while dissecting to the stats plugin and do some other stuff using the stats_tree functions. Now I have the following situation: - My own dissector for my protocol - My stats plugin for my protocol - Another protocol (802.11) which my protocol encapsulates - I haven't written the dissector for this one - it is already included in Wireshark. When I try to do some more advanced stuff I run into a couple of problems. The main problem is that I'd like to be able to access the tree (or at least some information, like sequence number of packet, data of ACK etc.) of the protocol which I have encapsulated (802.11). I can't save the 'tree' variable in my dissector to the tap information or to the private_data field, because it seems that when the stats plugin is called, the dissector is also called with tree=NULL, so it skips the whole tree creating part. I guess I either need to get Wireshark to also create the tree when it calls my stats plugin, or find some other way to get the information about the protocol mine encapsulates. Unfortunately I have no clue how to do that. Does anyone here has the knowledge how something like this can be achieved? Thanks, Floris CONFIDENTIALITY NOTICE: The contents of this email are confidential and for the exclusive use of the intended recipient. If you receive this email in error, please delete it from your system immediately and notify us either by email, telephone or fax. You should not copy, forward, or otherwise disclose the content of the email. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe CONFIDENTIALITY NOTICE: The contents of this email are confidential and for the exclusive use of the intended recipient. If you receive this email in error, please delete it from your system immediately and notify us either by email, telephone or fax. You should not copy, forward, or otherwise disclose the content of the email. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Stats/tap plugin problem Floris van Nee (Jul 26)
- Re: Stats/tap plugin problem Floris van Nee (Jul 26)
- Re: Stats/tap plugin problem Maynard, Chris (Jul 26)
- Re: Stats/tap plugin problem Floris van Nee (Jul 26)
- Re: Stats/tap plugin problem Maynard, Chris (Jul 26)
- Re: Stats/tap plugin problem Floris van Nee (Jul 26)
- Re: Stats/tap plugin problem Guy Harris (Jul 26)
- Re: Stats/tap plugin problem Maynard, Chris (Jul 26)
- Re: Stats/tap plugin problem Floris van Nee (Jul 26)