Wireshark-dev: [Wireshark-dev] small patch for smtps on port 465
From: rmkml <rmkml@xxxxxxx>
Date: Sat, 9 Jan 2010 16:46:58 +0100 (CET)
Hi,
First, Happy New Year for everyone
ok I have created a small patch for packet-smtp.c dissector, redirect to ssl dissector for smtps (on port 465).
tested on tshark v1.2.5 on linux i386.
Regards
Rmkml
Crusoe-Researches.com
--- epan/dissectors/packet-smtp.c.ori	2010-01-09 16:53:18.000000000 +0100
+++ epan/dissectors/packet-smtp.c	2010-01-09 16:56:24.000000000 +0100
@@ -44,6 +44,7 @@
 
 /* RFC 2821 */
 #define TCP_PORT_SMTP 25
+#define TCP_PORT_SSL_SMTP 465
 
 /* RFC 4409 */
 #define TCP_PORT_SUBMISSION 587
@@ -919,6 +920,7 @@
 
   smtp_handle = find_dissector("smtp");
   dissector_add("tcp.port", TCP_PORT_SMTP, smtp_handle);
+  ssl_dissector_add(TCP_PORT_SSL_SMTP, "smtp", TRUE);
   dissector_add("tcp.port", TCP_PORT_SUBMISSION, smtp_handle);
 
   /* find the IMF dissector */