<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
   <title>scooterboy.ca</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/" />
   <link rel="self" type="application/atom+xml" href="http://www.scooterboy.ca/SBblog/atom.xml" />
   <id>tag:www.scooterboy.ca,2011:/SBblog//1</id>
   <updated>2007-09-02T11:18:57Z</updated>
   
   <generator uri="http://www.sixapart.com/movabletype/">Movable Type 3.33</generator>

<entry>
   <title>test</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000215.php" />
   <id>tag:www.scooterboy.ca,2007:/SBblog//1.215</id>
   
   <published>2007-09-02T11:18:44Z</published>
   <updated>2007-09-02T11:18:57Z</updated>
   
   <summary>test...</summary>
   <author>
      <name></name>
      
   </author>
         <category term="argh" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      test
      
   </content>
</entry>
<entry>
   <title>how to make cannabutter</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000214.php" />
   <id>tag:www.scooterboy.ca,2007:/SBblog//1.214</id>
   
   <published>2007-07-08T19:15:01Z</published>
   <updated>2007-07-08T19:36:09Z</updated>
   
   <summary>I wrote up instructions for making cannabutter. The pictures are too big to fit in this little box, so...link......</summary>
   <author>
      <name></name>
      
   </author>
         <category term="fun" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[I wrote up instructions for making <a href="http://www.scooterboy.ca/SBblog/cannabutter.html">cannabutter</a>.  The pictures are too big to fit in this little box, so...link...]]>
      
   </content>
</entry>
<entry>
   <title>this is not happening</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000213.php" />
   <id>tag:www.scooterboy.ca,2007:/SBblog//1.213</id>
   
   <published>2007-06-08T00:35:25Z</published>
   <updated>2007-06-08T00:35:39Z</updated>
   
   <summary></summary>
   <author>
      <name></name>
      
   </author>
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[<object width="425" height="350"><param name="movie" value="http://www.youtube.com/v/yGvTXSYvL2Q"></param><param name="wmode" value="transparent"></param><embed src="http://www.youtube.com/v/yGvTXSYvL2Q" type="application/x-shockwave-flash" wmode="transparent" width="425" height="350"></embed></object>]]>
      
   </content>
</entry>
<entry>
   <title>a new-eehnnnn a-post, yeah</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000212.php" />
   <id>tag:www.scooterboy.ca,2007:/SBblog//1.212</id>
   
   <published>2007-05-31T14:03:35Z</published>
   <updated>2007-05-31T14:05:00Z</updated>
   
   <summary>I honestly don&apos;t know how to introduce this. Vedder-speak...</summary>
   <author>
      <name></name>
      
   </author>
         <category term="haha" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[I honestly don't know how to introduce this.

<a href="http://www.azchords.com/p/pearljam-tabs-2995/yellowledbetter-tabs-112584.html">Vedder-speak</a>]]>
      
   </content>
</entry>
<entry>
   <title>neat</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000211.php" />
   <id>tag:www.scooterboy.ca,2007:/SBblog//1.211</id>
   
   <published>2007-05-08T10:33:41Z</published>
   <updated>2007-05-08T10:34:27Z</updated>
   
   <summary>The Leave It to Beaver prop man/woman is funny....</summary>
   <author>
      <name></name>
      
   </author>
         <category term="fun" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[The <a href="http://www.shorpy.com/leave-it-to-beaver">Leave It to Beaver prop man/woman</a> is funny.]]>
      
   </content>
</entry>
<entry>
   <title>:)</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000210.php" />
   <id>tag:www.scooterboy.ca,2007:/SBblog//1.210</id>
   
   <published>2007-04-14T08:59:27Z</published>
   <updated>2007-04-14T09:00:37Z</updated>
   
   <summary>Cyanide &amp; Happiness @ Explosm.net just click it. i&apos;m lazy...</summary>
   <author>
      <name></name>
      
   </author>
         <category term="fun" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[<a href="http://www.explosm.net/comics/853/"><img alt="Cyanide and Happiness, a daily webcomic" src="http://www.flashasylum.com/db/files/Comics/Rob/bleeding2.png" border=0></a><br />Cyanide & Happiness @ <a href="http://www.explosm.net">Explosm.net</a>

<font size=-2>just click it.  i'm lazy</font>]]>
      
   </content>
</entry>
<entry>
   <title>worst. player. ever.</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000209.php" />
   <id>tag:www.scooterboy.ca,2007:/SBblog//1.209</id>
   
   <published>2007-03-10T20:51:37Z</published>
   <updated>2007-03-10T20:52:34Z</updated>
   
   <summary>I just played a game against the worst chess player ever. (relax, MK, it wasn&apos;t you) Look how many pieces I took....</summary>
   <author>
      <name></name>
      
   </author>
         <category term="wow" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[I just played a game against the worst chess player ever. (relax, MK, it wasn't you)

Look how many pieces I took.

<img src="http://www.scooterboy.ca/images/chess.JPG">]]>
      
   </content>
</entry>
<entry>
   <title>wow</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000208.php" />
   <id>tag:www.scooterboy.ca,2007:/SBblog//1.208</id>
   
   <published>2007-01-30T16:25:32Z</published>
   <updated>2007-01-30T16:26:10Z</updated>
   
   <summary>save for the &quot;life of the party&quot; bit, this is a pretty accurate representation of the me in january 2007.....which is pretty depressing... Which &apos;Home Movies&apos; character are you? You are Coach McGuirkTake this quiz! Quizilla | Join | Make...</summary>
   <author>
      <name></name>
      
   </author>
         <category term="haha" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[save for the "life of the party" bit, this is a pretty accurate representation of the me in january 2007.....which is pretty depressing...

<div style="width:300px;_height:250px; min-height:250px; background-color:rgb(216,233,237); text-align:center;">
	<div style="background:rgb(129,172,201); height:4px;">
		<img src="http://www.quizilla.com/images/blue_drk_corner1.gif" style="float: left" height="4" hspace="0" />
		<img src="http://www.quizilla.com/images/blue_drk_corner2.gif" style="float: right" height="4" hspace="0" />
	</div>
	<div style="background:rgb(129,172,201); padding: 0pt 0pt 5px;">
		<span style="font-size:12px; color:rgb(255,255,255); padding:3px; font-family:Arial;"><strong>Which 'Home Movies' character are you?</strong></span>
	</div>
	<div style="padding:5px; text-align:left; font-size:12px; font-family:Arial; background-color:rgb(216,233,237);">

<center><img src="http://images.quizilla.com/F/friendbat/1085560935_uizmcguirk.jpg"><br/>You are Coach McGuirk<br/>Take this <a target="quizilla" style="color:rgb(0,0,0)" href="http://quizilla.com/redirect.php?statsid=17&url=http://www.quizilla.com/users/friendbat/quizzes/Which+%27Home+Movies%27+character+are+you%3F">quiz</a>!<br/>

<br/><a href="http://www.quizilla.com/redirect.php?statsid=18&url=http://www.quizilla.com/" target="quizilla">
<img border="0" src="http://www.quizilla.com/images/codepastes/30qzlogo.gif" style="padding:2px;" /></a>

<span style="font-family:Arial;font-size:12;">

<a style="color:rgb(0,0,0);" target="quizilla" href="http://www.quizilla.com/redirect.php?statsid=18&url=http://www.quizilla.com">Quizilla</a> | 
<a style="color:rgb(0,0,0);"  target="quizilla" href="http://www.quizilla.com/redirect.php?statsid=21&url=http://www.quizilla.com/register">Join</a> 

| <a style="color:rgb(0,0,0);" target="quizilla" href="http://www.quizilla.com/redirect.php?statsid=20&url=http://www.quizilla.com/makeaquiz.php">Make A Quiz</a> | <a target="quizilla" href="http://www.quizilla.com/redirect.php?statsid=42&url=http://www.quizilla.com/users/friendbat/quizzes/">More Quizzes</a> | <a style="color:rgb(0,0,0);" target="quizilla" href="http://www.quizilla.com/redirect.php?statsid=19&url=http://www.quizilla.com/codepastes/?quizid=574793">Grab Code</a></span>
</div></div>]]>
      
   </content>
</entry>
<entry>
   <title>aaaahahahahahahahah</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000207.php" />
   <id>tag:www.scooterboy.ca,2007:/SBblog//1.207</id>
   
   <published>2007-01-28T17:07:32Z</published>
   <updated>2007-01-28T17:08:25Z</updated>
   
   <summary>The sign reads &quot;WARNING - Due to overfeeding, some pigeons can become aggressive&quot; http://www.dusky.sk...</summary>
   <author>
      <name></name>
      
   </author>
         <category term="haha" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[The sign reads "WARNING - Due to overfeeding, some pigeons can become aggressive"

<a href="http://www.dusky.sk/halbot/?id=2069">http://www.dusky.sk</a>]]>
      
   </content>
</entry>
<entry>
   <title>heh</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000206.php" />
   <id>tag:www.scooterboy.ca,2007:/SBblog//1.206</id>
   
   <published>2007-01-21T03:04:24Z</published>
   <updated>2007-01-21T03:05:19Z</updated>
   
   <summary></summary>
   <author>
      <name></name>
      
   </author>
         <category term="haha" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[<a href="http://www.scooterboy.ca/images/loureed.jpg"><img src="http://www.scooterboy.ca/images/loureed.jpg" width=250></a>]]>
      
   </content>
</entry>
<entry>
   <title>best spam ever</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000205.php" />
   <id>tag:www.scooterboy.ca,2006:/SBblog//1.205</id>
   
   <published>2006-12-18T21:44:37Z</published>
   <updated>2006-12-18T21:45:10Z</updated>
   
   <summary></summary>
   <author>
      <name></name>
      
   </author>
         <category term="fun" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[<img src="http://www.scooterboy.ca/images/HolidayGreeting.jpg">]]>
      
   </content>
</entry>
<entry>
   <title>Back in the day...</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000204.php" />
   <id>tag:www.scooterboy.ca,2006:/SBblog//1.204</id>
   
   <published>2006-11-23T02:37:52Z</published>
   <updated>2006-11-23T03:04:53Z</updated>
   
   <summary>Tonight I found a brief Ethereal dissector howto that I wrote as part of my semester 6 independent study. It wasn&apos;t doing a lot of good sitting on an old cd on a shelf, so I figured I&apos;d put it...</summary>
   <author>
      <name></name>
      
   </author>
         <category term="haha" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[Tonight I found a brief Ethereal dissector howto that I wrote as part of my semester 6 independent study.  It wasn't doing a lot of good sitting on an old cd on a shelf, so I figured I'd put it online....so that it will still not be doing a lot of good, but it will be doing the same amount of nothing for a wider potential audience.



Kieron's Ethereal Dissector HOWTO

Download and untar/gzip the source code for Ethereal.  The latest stable version is 0.9.16, and it is available at http://www.ethereal.com/distribution/ethereal-0.9.16.tar.gz

Open the ./doc/README.developer file and find the template within it.  Copy and paste the template to a new file with a naming scheme of packet-&lt;abbreviation for protocol you are dissecting&gt;.c.
eg.  packet-tdp.c

The template contains all of the code that needs to be there.

Edit Makefile.am and add your file to DISSECTOR_SRC.  It is this entry that includes your file when you compile Ethereal.  You could, at this point, run make and your dissector would be included in the build, but it wouldn't actually do anything.

Open your file and make the changes outlined in README.developer.

Choose a unique characteristic of your protocol for the registration with Ethereal.  TCP and UDP ports are logical choices.  Add a command in the proto_reg_handoff_&lt;protocol&gt; function to register your dissector.
Eg,         	dissector_add("tcp.port", 711, tdp_handle);
	this tells Ethereal to call your dissector whenever a packet's TCP port is 711.

Double check that you have made the changes in the dissect_&lt;protocol&gt; function that pertain to COL_PROTOCOL and COL_INFO.  These values are shown in the top Ethereal frame, and allow for quick identification of packets.

Now is a good time to check that you've successfully completed the steps up to this point.  Run make to compile Ethereal.  Run Ethereal and capture some packets that are of the protocol you are dissecting.  If all goes well, Ethereal should now identify the protocol.  It won't, however, decode the protocol at all.  You didn't think it was that easy, did you?  Oh, you did, huh?

Decoding the Packet

For each field in the packet that you wish to decode, you will have to:

declare a static int with a value of -1.  Ethereal uses this to track the fields.
eg, static int hf_tdp_version = -1;

create a new array element in static hf_register_info[] in the proto_register_&lt;protocol&gt; function
eg,	{ &hf_tdp_version, { "Version", "tdp.hdr.version",                     	FT_UINT16, BASE_DEC, NULL, 0x0, "", HFILL }},

add the field to the tree
eg,                 proto_tree_add_item(tdp_tree, hf_tdp_version, tvb, offset, 2, FALSE);


There is much more functionality that can be taken advantage of.  If you've gotten this far, you're probably motivated enough to read README.developer and README.tvbuff.
The best way to learn how it's done, though, is to analyze the code of a protocol you're quite familiar with.

Two handy guides are:
http://www.snakegully.nu/tech/ethereal_dissector.html
http://www.richardsharpe.com/ethereal-stuff.html]]>
      
   </content>
</entry>
<entry>
   <title>they move pretty quickly</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000203.php" />
   <id>tag:www.scooterboy.ca,2006:/SBblog//1.203</id>
   
   <published>2006-11-04T23:35:23Z</published>
   <updated>2006-11-04T23:36:31Z</updated>
   
   <summary>I&apos;m not exactly sure how something can be new and deprecated at the same time. I guess development on the 2.6 branch is just moving along that quickly....</summary>
   <author>
      <name></name>
      
   </author>
         <category term="um" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[I'm not exactly sure how something can be new and deprecated at the same time.  I guess development on the 2.6 branch is just moving along that quickly.

<img src="http://www.scooterboy.ca/images/um.jpg">]]>
      
   </content>
</entry>
<entry>
   <title>best fark headline</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000202.php" />
   <id>tag:www.scooterboy.ca,2006:/SBblog//1.202</id>
   
   <published>2006-11-03T03:40:28Z</published>
   <updated>2006-11-03T03:41:49Z</updated>
   
   <summary>this is possibly the best fark headline ever: &quot;Tom Cruise and business partner to run UA Studios, founded by Charlie Chaplin. In other words, studio has gone from silent film star with tiny mustache, to loudmouthed film star with giant...</summary>
   <author>
      <name></name>
      
   </author>
         <category term="haha" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      <![CDATA[this is possibly the best <a href="http://www.fark.com">fark</a> headline ever:

<p>"Tom Cruise and business partner to run UA Studios, founded by Charlie Chaplin. In other words, studio has gone from silent film star with tiny mustache, to loudmouthed film star with giant beard"</p>]]>
      
   </content>
</entry>
<entry>
   <title>you can&apos;t write this stuff</title>
   <link rel="alternate" type="text/html" href="http://www.scooterboy.ca/SBblog/archives/000201.php" />
   <id>tag:www.scooterboy.ca,2006:/SBblog//1.201</id>
   
   <published>2006-10-25T02:57:23Z</published>
   <updated>2006-10-25T02:59:58Z</updated>
   
   <summary>I discovered tonight that you could find LiveJournal users based on &quot;school&quot;. I immediately checked out the journals of people who have Perth and District Collegiate Institute listed. The first one I click on is LJ User &quot;emmilicious&quot;, and just...</summary>
   <author>
      <name></name>
      
   </author>
         <category term="dude" scheme="http://www.sixapart.com/ns/types#category" />
   
   
   <content type="html" xml:lang="en" xml:base="http://www.scooterboy.ca/SBblog/">
      I discovered tonight that you could find LiveJournal users based on &quot;school&quot;.  I immediately checked out the journals of people who have Perth and District Collegiate Institute listed.  The first one I click on is LJ User &quot;emmilicious&quot;, and just look at what her most recent post is:

&quot;Forgot to mention- my best friend Natalie is pregnant too! She&apos;s due in June so we get to raise our children together! YAY!

Now Laura and Alaina need to get knocked up so we can all have babies at the same time.
Work on this, will ya?&quot;

Holy shit.
      
   </content>
</entry>

</feed>
