ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] overriding dissector for port 8080

From: "John Dill" <John.Dill@xxxxxxxxxxxxxxxxx>
Date: Thu, 3 Apr 2014 10:26:48 -0400
Title: overriding dissector for port 8080

I have network traffic that uses TCP port 8080 for sending non-http data (on a private network with its own custom application layer on top of TCP an UDP).  Is there a recommendation for how to override or remove this dissector?  I still have port 80 for http traffic.

I can remove port 8080 from the default http dissector TCP port options, and strip 'http-alt' out of services (to be replaced with a different well-known service name).  Is there anything else?

I also noticed a disabled_protos.[ch], so maybe there is a feature to disable other protocols.  Is there a feature that could be used to hide protocols I don't need in the Filter _expression_ (to reduce the list to simplify the interface to users)?

Thanks,
John Dill