https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6322
--- Comment #7 from Ken Cox <kenstir@xxxxxxxxx> 2011-09-08 12:52:20 PDT ---
RTP can be carried over UDP STUN, and if it is the UDP port number can be even
or odd. RFC 3550 says: For UDP and similar protocols, RTP should use an even
destination port number and the corresponding RTCP stream should use the next
higher (odd) destination port number. Adding (pinfo->ptype == PT_UDP) to the
heuristic was a lame attempt to maintain the spirit of the even-port check
without missing my odd-port TCP packets. I don't see a problem in practice
with removing the even-port check altogether, aside from possibly more false
positives.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
