Re: DCERPC over TCP

[Andrej van der Zee <andrejvanderzee () gmail com>]

> > Shouldn't the heuristic sub-dissector for DCERPC be favored over the
> > port-registered GTP dissector?
>
> *If* "Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific 
> port" is set for TCP, yes, it should be.

Indeed, this TCP-option was switched off. After switching it on, it
works as expected. Thanks for pointing this out.

Cheers,
Andrej
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe