Wireshark · Wireshark-users: Re: [Wireshark-users] Decode as different protocol

[Manolis Katsidoniotis <manoska@xxxxxxxxx>]

Hello Abhik

It looks like my version is somewhat old (I can't replace it) and I'm getting the attached error.
Any other ideas?

thanks
Manolis

On Tue, Jan 24, 2012 at 5:52 PM, Abhik Sarkar <sarkar.abhik@xxxxxxxxx> wrote:

Hi Manolis

Edit > Preferences > Protocols > SIP > SIP TCP Ports

You can add 5500 in a comma separated list there.

HTH
Abhik

On Tue, Jan 24, 2012 at 7:33 PM, Manolis Katsidoniotis <manoska@xxxxxxxxx> wrote:

Hello all

In the attached snapshot, frame 2767 is a sip packet sent via TCP to destination port 5500.
I'm assuming that because of the port number, wireshark assumes that it is a vnc frame (Virtual Network Computing).

I change this by selecting the packet and using the "Decode As" option.
However this needs to be done every time I open wireshark.
Does anyone happen to be aware of doing this permanent (i.e. modifying some start-up file)?

Thanks in advance
Manolis

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

Attachment: wireshark_version.jpg
Description: JPEG image

Attachment: preference_snapshot.jpg
Description: JPEG image