Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Transport name resolution

From: Bill Meier <wmeier@xxxxxxxxxxx>
Date: Mon, 16 Sep 2013 16:33:13 -0400
On 9/16/2013 4:15 PM, Dirk Jagdmann wrote:
Should we, instead, look the port number up in the "tcp.port" or
"udp.port" (or "sctp.port") dissector table and, if it finds a
dissector handle, look up the short name of the protocol for that
dissector handle and use that?

I think this is more useful, since the dissector short name is typically
used as the filter prefix. It is just confusing if slightly different
strings are shown, because they come from some other list/database.


+1