Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] RTCP Heuristic decoder

From: didier <dgautheron@xxxxxxxx>
Date: Fri, 11 Sep 2009 23:48:31 +0200
Hi,
Le vendredi 11 septembre 2009 ᅵ 13:12 -0700, vinayak kamath a ᅵcrit :
> 
> 
> On Fri, Sep 11, 2009 at 11:28 AM, Bill Meier <wmeier@xxxxxxxxxxx>
> wrote:
>         > On Thu, Sep 10, 2009 at 4:59 PM, Guy Harris
>         <guy@xxxxxxxxxxxx> wrote:
>         >
>         >> On Sep 10, 2009, at 4:30 PM, vinayak kamath wrote:
>         >>
>         >>> We have our own custom decoder for a tweaked version of
>         RTCP protocol.
>         >>> Heres the code snippet where in we say anything on this
>         udp.port
>         >>> send the message to custom decoder.
>         >>> ##########################################################
>         >>> if(!TWS_PortList("FOO", configFile, (int*)portList,
>         MAXPORTS))
>         >>>       {
>         >>>         while (count < MAXPORTS && portList[count]!=0)
>         >>>         {
>         >>>             dissector_add("udp.port", portList[count],
>         foo_handle);
>         >>>             count++;
>         >>>         }
>         >>>       }
>         >>> ##########################################################
>         >>>

>         
>      Yes even "Try heuristic sub-dissectors first" preference is not
> set . Even then it decodes as RTCP & not FOO..
I guess someone have to ask it... But are you sure you're initialisation
code is executed?

If yes run it under a debuger, put a breakpoint in the RTCP dissector, a
backtrace will show you the culprit.

Didier