Wireshark-bugs: [Wireshark-bugs] [Bug 11152] Wireshark decodes some valid RTP packets as STUN pa
      
      
    
    
      
        
            Comment # 10
              on bug 11152
              from  Hadriel Kaplan
        (In reply to Michael Mann from comment #9)
> I don't want to hijack this bug, but I looked at the suggested changes. 
> Would it make more sense to have a "global" list of heuristic dissectors
> rather than have individual preferences in individual dissectors?  We have a
> global list for dissectors in general, but I guess uses may want to
> differentiate disabling a protocol from disabling a heuristic.
Yeah I was wondering the same thing when I was making the code changes. I
thought maybe it wasn't possible to have a generic common way to disable/enable
heuristic dissectors, but looking at them it sure looks like it should be.
But it's not completely trivial to do so, because some/many of them need to be
disabled by default, and the way they've done that in code is inconsistent; so
I'd have to go through each protocol that has a heuristic and verify what it
does. And arguably the heur_dissector_add() should be changed to take a boolean
of whether it should be enabled/disabled by default.
There are ~200 protocols that add a heuristic dissector, so it's a big job but
not insurmountable. Maybe we should take this to the dev list?
         
      
      
      You are receiving this mail because:
      
      
          - You are watching all bug changes.