Ethereal-dev: [Ethereal-dev] dissector port clash (e.g. SNMP vs. TFTP)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Thomas Anders <thomas.anders@xxxxxxxxxxxxx>
Date: Tue, 11 May 2004 17:16:15 +0200
If UDP packets in the same capture use the same (non-well-known) source
port for different protocols, the first dissector "wins", i.e. tries
to dissect all those packets, even for the other protocols.
Even worse, I've been unable to change this behaviour with "Decode As".

The attached sample capture file illustrate the problem. The first
two packets (SNMP) are dissected fine in my Ethereal (CVS), but the
other three (TFTP) are not, because they're dissected as SNMP.

Am I missing something obvious? Otherwise, can there anything be done
about it?


+Thomas

--
Thomas Anders (thomas.anders at blue-cable.de)

Attachment: snmp_tftp.pcap
Description: application/vnd.mozilla.guess-from-ext