Wireshark-bugs: [Wireshark-bugs] [Bug 12168] Some RPC messages sent over TCP not recognized heur
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 21 Mar 2016 00:33:25 +0000

changed bug 12168


What Removed Added
Status UNCONFIRMED CONFIRMED
CC   mmann78@netscape.net
Ever confirmed   1

Comment # 2 on bug 12168 from 
This is similar to the same problem seen with bug 12265 - you have a text based
protocol (IMAP) whose only real "heuristic" is its IANA port registration (993
is reserved for IMAP over SSL).  Since the data's encrypted (over SSL), you
probably can't even add a "is printable" heuristic like I did ACAP (and that
isn't even guaranteed, it's just lessens the possibility of picking wrong
protocol).

While I agree with Jean than maybe prioritized Decode As would work better,
you're still not going to solve the problem of using "random" ports that are
otherwise reserved according to IANA.

You are receiving this mail because:
  • You are watching all bug changes.