search

mobile-insight / mobileinsight-core

Mobile Network Intelligence Made Easy -- MobileInsight core functionalities
http://www.mobileinsight.net
Other
105 stars 80 forks source link

Update ws_dissector to use Wireshark 2.4.x stable release APIs #28

Open zwyuan opened 6 years ago

zwyuan commented 6 years ago

Right now I have cross-compiled a newest set of the Wireshark 2.4.1 and Glib 2.54.0 libraries for Android. To update to these libraries, the Wireshark APIs used by the ws_dissector also needs to be updated accordingly. (Remember that the API used in Wireshark 2.0.x stable release and 2.4.x stable release changed a bit)

moonsky219 commented 6 years ago

@zwyuan I get segfault from libwiretap.so.7.0.2 when calling epan_init(). I am using Wireshark 2.4.2. It is similar to this question: https://stackoverflow.com/questions/46263024/getting-segmentation-fault-in-c-on-ubuntu-when-trying-to-run-function-from-so-l

moonsky219 commented 6 years ago

@zwyuan I solved the segfault by calling wtap_init() before epan_init(). But after making some change to make compile success, the decoding still not working, the frame_data doens't use lnk_t variable any more which we used to indicate the encapsulation type in our previous implementation.

zwyuan commented 6 years ago

oh which libraries are you using? I haven't put newly compiled libwiretap.so to mobileiInsight-libs repo yet…

moonsky219 commented 6 years ago

I don't mean the android version, I am on Ubuntu and trying to make ws_dissector work with Wireshark 2.4.x. I find the update could take more efforts than just changing function name or parameters.

zwyuan commented 6 years ago

I see. That's useful information to know. Thanks a lot.

moonsky219 commented 5 years ago

Hi @zwyuan , I create a new branch named update_ws_dissector which supports Wireshark-3.0.1. The install-ubuntu.sh is also updated accordingly and it may need your efforts to update the install-macos.sh. One issue to notice, I find some parsing result is also updated, and this can easily break our analyzer code if not written carefully. For example, the lte_rrc_analyzer.py get an exception caused by change in lte-rrc.CarrierFreqUTRA_FDD_element: lte-rrc.q_RxLevMin ==> lte-rrc.utra_q_RxLevMin

zwyuan commented 5 years ago

Great efforts Haotian! I can take a look and do updates on my side. And I agree that probably we should go through updates on the entire repo before merging this brach.

Hi @zwyuan , I create a new branch named update_ws_dissector which supports Wireshark-3.0.1. The install-ubuntu.sh is also updated accordingly and it may need your efforts to update the install-macos.sh. One issue to notice, I find some parsing result is also updated, and this can easily break our analyzer code if not written carefully. For example, the lte_rrc_analyzer.py get an exception caused by change in lte-rrc.CarrierFreqUTRA_FDD_element: lte-rrc.q_RxLevMin ==> lte-rrc.utra_q_RxLevMin

Awaisryk commented 4 years ago

is there any update on this?