Wireshark-bugs: [Wireshark-bugs] [Bug 11869] X11 Protocol does not appear to be decoded.
Date: Thu, 10 Dec 2015 16:44:23 +0000

Comment # 6 on bug 11869 from
Ah, a little Googling suggests that the port number is 6000 plus the
display/server number--which is why most of the time it's 6000 or maybe 6001.

With SSH forwarding of X, though, don't we more frequently get into
(significantly) higher display numbers?

I did update our wiki page on X11 to indicate this limitation (and to fill in
some more of the template).

https://wiki.wireshark.org/X11

Maybe that with Decode-as is sufficient?  Then again, it's not like port
registrations are horribly expensive...  At the moment I don't have a strong
opinion.


You are receiving this mail because:
  • You are watching all bug changes.