ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Overriding existing RPC-TCP heuristic dissector with another

From: Shehjar Tikoo <shehjart@xxxxxxxxxxxxxxx>
Date: Fri, 02 Feb 2007 11:18:49 +1100
Guy Harris wrote:
On Jan 31, 2007, at 8:13 PM, Shehjar Tikoo wrote:
 > If you mean a dissector for ONC RPC running over TCP, which is a
heuristic dissector (as there is no standard set of ports for ONC RPC, other than 111 for the portmapper/rpcbind and 2049 for NFS), why not modify the existing one to do what you need? Having two heuristic dissectors for the *same* protocol makes no sense whatsoever; either modify one to do what you need, or build a special private version of Wireshark with your dissector replacing the standard one.

Yes, I'll modify the existing ones.

Thanks
Shehjar