Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 12168] Some RPC messages sent over TCP not recognized heuristically

[bugzilla-daemon@xxxxxxxxxxxxx]

Michael Mann changed bug 12168

What	Removed	Added
Status	UNCONFIRMED	CONFIRMED
CC		mmann78@netscape.net
Ever confirmed		1

Comment # 2 on bug 12168 from Michael Mann

This is similar to the same problem seen with bug 12265 - you have a text based
protocol (IMAP) whose only real "heuristic" is its IANA port registration (993
is reserved for IMAP over SSL).  Since the data's encrypted (over SSL), you
probably can't even add a "is printable" heuristic like I did ACAP (and that
isn't even guaranteed, it's just lessens the possibility of picking wrong
protocol).

While I agree with Jean than maybe prioritized Decode As would work better,
you're still not going to solve the problem of using "random" ports that are
otherwise reserved according to IANA.

---

      You are receiving this mail because:

• You are watching all bug changes.