Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3225] add ability to parse netdump protocol in wireshark

Date: Mon, 9 Feb 2009 13:18:32 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3225





--- Comment #4 from Bill Meier <wmeier@xxxxxxxxxxx>  2009-02-09 13:18:30 PDT ---
Wireshark already has UDP Port 6666 registered to the sigcomp protocol.

In fact, since sigcomp registers port 6666 after your netdump registration of
port 6666 and thus the netdump registration will get clobbered, the netdump
dissector will never get called in the current version.

(Maybe the netdump dissector worked previously because you were running it as a
plugin. ISTR that plugins register after regular dissectors).

In any case, doing a little Googling I find that a netdump dissector was
previously submitted some time ago (when what is now Wireshark was called
Ethereal).

See:
http://www.ethereal.com/lists/ethereal-dev/200504/msg00533.html and related
for a discussion about dealing with the issue that netdump uses port 6666 which
is already registered by sigcomp. (Use Google to find all the relevant messages
since they are split into more than one thread).

I don't know why the netdump dissector submitted in 2005 was never added to
Ethereal. Possibly changes were never submitted to handle the issue that port
6666 is already registered by sigcomp.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.