Wireshark · Wireshark-users: Re: [Wireshark-users] SSL Decryption Issues

[Stephen Fisher <stephentfisher@xxxxxxxxx>]

On Mon, Nov 06, 2006 at 11:00:26AM -0600, James Hughes wrote:

> Does anyone know why WireShark is loading 443 to HTTP, 636 to LDAP, 
> 993 to IMAP and 995 to POP? I need 443 associated to something else.

This is hard-coded in the source code:

>From epan/dissectors/packet-ssl.c:
    ssl_dissector_add(443, "http", TRUE);
    ssl_dissector_add(636, "ldap", TRUE);
    ssl_dissector_add(993, "imap", TRUE);
    ssl_dissector_add(995, "pop", TRUE);

What protocol do you need port 443 associated to?


Steve