Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.
Wireshark logo

Wireshark-users: Re: [Wireshark-users] DCERPC over TCP

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 27 Dec 2011 11:05:29 -0800
On Dec 26, 2011, at 4:36 PM, Andrej van der Zee wrote:

> Shouldn't the heuristic sub-dissector for DCERPC be favored over the
> port-registered GTP dissector.

*If* "Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port" is set for TCP, yes, it should be.
Wireshark logo footer

© Wireshark Foundation · Privacy Policy

Facebook·Mastodon·Twitter·YouTube