ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 12168] Some RPC messages sent over TCP not recognized heur

Date: Mon, 21 Mar 2016 01:19:50 +0000

Comment # 4 on bug 12168 from
(In reply to Jean Spector from comment #3)
> Presuming most users don't really need to recognize all the protocols in
> existence, maybe there could be other solutions - workarounds, really:
> * Let the user-specified "Decode As" take priority over the
> heuristics-driven decision (already mentioned above, adding it here for
> completeness' sake)
> * Let the user change the priority of protocols, e.g. RPC/NFS would go
> higher than SSL.

Both have been discussed in the past.  The first one is probably much "easier"
to implement than the second

> * Let the user disable some dissectors. Presuming I'm _only_ interested in
> seeing the ETH/TCP/IP/RPC/NFS, I wouldn't mind disabling a bunch of protocol
> dissectors that "get in the way". It could be hundreds or even thousands of
> dissectors, but I don't mind updating the conf file once to get what I
> really need.

This is already doable.  See Analyze->Enable Protocols.


You are receiving this mail because:
  • You are watching all bug changes.