Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Overriding existing RPC-TCP heuristic dissector with another

From: Shehjar Tikoo <shehjart@xxxxxxxxxxxxxxx>
Date: Fri, 02 Feb 2007 11:16:54 +1100
Guy Harris wrote:
On Feb 1, 2007, at 3:31 PM, Shehjar Tikoo wrote:

I need to ensure that my RPC/NFS dissector runs before the default one. The problem is, even if I get the heuristics right(..which is, basically
asking for all NFS traffic..), there no guarantee that my heuristic
dissector will get the packets before the default one.



If you need to dissect both of them differently, modify or replace both dissectors.

Thanks, thats what I wanted to know, whether to manually replace the existing ones or to use some existing method to override the default dissectors.


Shehjar