Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] RTP decoded as DPLAY in V1.0.0

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Fri, 11 Apr 2008 11:45:20 -0600
On Fri, Apr 11, 2008 at 04:24:00PM +0100, Martin Mathieson wrote:

> Like Jaap says, its either on a port that DPLAY thinks indicates DPLAY 
> traffic, or DPLAY has an over-zealous heuristic dissector that think 
> its found a DPLAY frame. Did you try to diable the DPLAY dissector as 
> he suggested?

Dplay is a heuristic dissector that needs to have its heuristics 
tightened since this is happening.  I would say that opening a bug with 
us is the appropriate course of action while disabling dplay is a 
work-around.


Steve