Wireshark-dev: Re: [Wireshark-dev] Overriding existing RPC-TCP heuristic dissector with another heuristic one

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Thu, 1 Feb 2007 07:30:37 +0100 (CET)

Hi,

The solution is to improve the heuristics until they can figure out which
dissector is the correct one.

Thanx,
Jaap

On Thu, 1 Feb 2007, Shehjar Tikoo wrote:

> Hi all
>
> I am writing a RPC over TCP heuristic dissector but the RPC dissector(in
> packet-rpc.c) also registers a heuristic RPC over TCP dissector.
>
> It is possible that the packet my heuristic dissector needs,
> gets routed to the existing dissector.
>
>  From the list archives I see discussions about overriding regular
> dissectors with heuristic dissectors( using tcp.try_heuristic_first) but
> how can I override an existing heuristic dissector with another one.
>
> Thanks
> Shehjar