Wireshark-dev: Re: [Wireshark-dev] Overriding existing RPC-TCP heuristic dissector with another heuristic one

From: Shehjar Tikoo <shehjart@xxxxxxxxxxxxxxx>
Date: Fri, 02 Feb 2007 11:18:49 +1100

Guy Harris wrote:

On Jan 31, 2007, at 8:13 PM, Shehjar Tikoo wrote:

 > If you mean a dissector for ONC RPC running over TCP, which is a

heuristic dissector (as there is no standard set of ports for ONC RPC, other than 111 for the portmapper/rpcbind and 2049 for NFS), why not modify the existing one to do what you need? Having two heuristic dissectors for the *same* protocol makes no sense whatsoever; either modify one to do what you need, or build a special private version of Wireshark with your dissector replacing the standard one.

Yes, I'll modify the existing ones.

Thanks
Shehjar