Ethereal-dev: Re: [Ethereal-dev] dissector port clash (e.g. SNMP vs. TFTP)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Thomas Anders <thomas.anders@xxxxxxxxxxxxx>
Date: Tue, 11 May 2004 17:59:26 +0200
Biot Olivier wrote:

|From: Thomas Anders
|
|If UDP packets in the same capture use the same (non-well-known) source
|port for different protocols, the first dissector "wins"

>

The only workaround today is to disable the unwanted protocol by choosing
"Analyze" --> "Enabled protocols" and untick SNMP from the list".


What about tomorrow ;) -- from a coding point of view?

Shouldn't at least the dissector registration for the well-known destination
port override the one for the dynamic source port? (see the third packet in
the sample capture)

Disabling the first dissector (SNMP) obviously prevents proper dissection
of those first packets. Bad tradeoff. Of course users would like to properly
dissect *both* protocols *concurrently*.


+Thomas

--
Thomas Anders (thomas.anders at blue-cable.de)