Wireshark mailing list archives
Re: DCERPC over TCP
From: Guy Harris <guy () alum mit edu>
Date: Tue, 27 Dec 2011 11:05:29 -0800
On Dec 26, 2011, at 4:36 PM, Andrej van der Zee wrote:
Shouldn't the heuristic sub-dissector for DCERPC be favored over the port-registered GTP dissector.
*If* "Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port" is set for TCP, yes, it should be. ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- DCERPC over TCP Andrej van der Zee (Dec 19)
- Re: DCERPC over TCP Guy Harris (Dec 19)
- Re: DCERPC over TCP Bill Meier (Dec 19)
- Re: DCERPC over TCP Andrej van der Zee (Dec 19)
- Re: DCERPC over TCP Andrej van der Zee (Dec 26)
- Re: DCERPC over TCP Chris Maynard (Dec 27)
- Re: DCERPC over TCP Guy Harris (Dec 27)
- Re: DCERPC over TCP Andrej van der Zee (Dec 27)