Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] dissect_sip_tcp_heur()

From: Hadriel Kaplan <hadriel.kaplan@xxxxxxxxxx>
Date: Mon, 12 Aug 2013 08:49:04 -0400
On Aug 12, 2013, at 6:22 AM, Martin Kaiser <lists@xxxxxxxxx> wrote:

>> I'm not really familiar with SIP over TCP (in all my use cases, SIP is
>> over UDP) but your proposal makes sense.
> 
> Thanks Pascal,
> 
> that explains why nobody spotted this so far.

I think it's more because it's only the heuristic SIP/TCP dissector, instead of the normal SIP/TCP dissector. (Or at least I've never noticed a problem dissecting SIP/TCP, which I do on occasion.)

But yeah your fix looks right.

-hadriel