ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 6223] Port 3002 is dissected as "ip.access GSM over IP" ev

Date: Wed, 10 Aug 2011 20:24:51 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6223

--- Comment #3 from Guy Harris <guy@xxxxxxxxxxxx> 2011-08-10 20:24:50 PDT ---
If both the source and destination port number match a dissector, Wireshark has
to choose one of the dissectors as a match.  In order to have the choice be a
bit more predictable (and not depend on the direction of the packet), and
because lower port numbers tend to be assigned port numbers, Wireshark first
tries the numerically lower port number followed by the numerically higher port
number.  Thus 12080 is going to lose against anything less than 12080.

Handling those other protocols means all their dissectors would have to be
changed to new-style dissectors *if* that's possible in order to avoid
mis-dissecting the packets.

An alternative would be to disable the dissectors in question.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.