ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] How can I delete a heuristic dissector

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Mon, 22 Jan 2007 14:11:38 +0100 (CET)
Hi,

I think you've misread me. It's disable, not delete. And what's even
better, you can do it now! Start Wireshark, go to menu | Analyze | Enabled
Protocols. There you are presented a list of all dissectors, which you
individually can disable. Save the list and you're done.

Thanx,
Jaap

On Mon, 22 Jan 2007, Hal Lander wrote:

> How do I delete a heuristic dissector?
> I want to do this so that I can use preferences properly.
> I might also want to do it if another heuristic dissector is wrongly
> grabbing packets (not happening at the moment) that should be coming to me.
>
> The example in README.developer shows;
>                   dissector_delete("tcp.port", currentPort,
> PROTOABBREV_handle);
>
> but this would not apply to a heuristic dissector as I don't have a handle
> for it and it does not have a port. I cannot see any other examples of
> deleting dissectors in the readme.
>
> TIA
> Hal