Wireshark-dev: Re: [Wireshark-dev] Overriding existing RPC-TCP heuristic dissector with another heuristic one

From: Shehjar Tikoo <shehjart@xxxxxxxxxxxxxxx>
Date: Fri, 02 Feb 2007 11:16:54 +1100

Guy Harris wrote:

On Feb 1, 2007, at 3:31 PM, Shehjar Tikoo wrote:

I need to ensure that my RPC/NFS dissector runs before the default one. The problem is, even if I get the heuristics right(..which is, basically

asking for all NFS traffic..), there no guarantee that my heuristic
dissector will get the packets before the default one.

If you need to dissect both of them differently, modify or replace both dissectors.

Thanks, thats what I wanted to know, whether to manually replace the existing ones or to use some existing method to override the default dissectors.

Shehjar