Re: DCERPC over TCP

[Chris Maynard <Chris.Maynard () gtech com>]

Andrej van der Zee <andrejvanderzee@...> writes:

> Shouldn't the heuristic sub-dissector for DCERPC be favored over the
> port-registered GTP dissector.

Are you able to post a small capture file depicting this?


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe