Wireshark-bugs: [Wireshark-bugs] [Bug 12283] RPC traffic not recognized when port = 995
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 25 Mar 2016 01:29:23 +0000

Comment # 8 on bug 12283 from 
(In reply to Jamie Bainbridge from comment #7)
> (In reply to Guy Harris from comment #6)
> > If you set the TCP preference "Try heuristic sub-dissectors first" to true,
> > it recognizes the traffic in question as RPC.
> 
> Thanks, I will try this. Perhaps this default has changed between 1.x and
> 2.x,

That was my first thought, but:

$ egrep 'static gboolean try_heuristic_first = '
1.12/epan/dissectors/packet-tcp.c 2.0/epan/dissectors/packet-tcp.c
1.12/epan/dissectors/packet-tcp.c:static gboolean try_heuristic_first = FALSE;
2.0/epan/dissectors/packet-tcp.c:static gboolean try_heuristic_first = FALSE;

so, no, it didn't change - it defaulted to "try port numbers first" in 1.12.x
and 2.0.x.

You are receiving this mail because:
  • You are watching all bug changes.