Wireshark-dev: Re: [Wireshark-dev] For some reason Version 2.6.2 (v2.6.2-0-g1b3cedbc) will no l
From: Richard Sharpe <realrichardsharpe@xxxxxxxxx>
Date: Mon, 6 Aug 2018 11:06:23 -0700
On Fri, Aug 3, 2018 at 6:46 PM, Richard Sharpe
<realrichardsharpe@xxxxxxxxx> wrote:
> On Fri, Aug 3, 2018 at 6:22 PM, Guy Harris <guy@xxxxxxxxxxxx> wrote:
>> On Aug 3, 2018, at 3:12 PM, Richard Sharpe <realrichardsharpe@xxxxxxxxx> wrote:
>>
>>> Has anyone else seen this?
>>>
>>> For some reason Decode As no longer seems to work for me.
>>>
>>> We run NFS on port 20491 as well as 2049, but when I ask Wireshark to
>>> decode port 20491 traffic as RPC it will not do that for me.
>>
>> I tried adding a new "Decode As..." entry, but 1) it didn't appear to have any effect and 2) regardless of whether I clicked "Save" or "OK", it didn't even *persist* - I re-opened the "Decode As..." dialog, and it didn't show the new entry.
>>
>> This was with a fairly recent build from the master branch.
>
> I was testing with a recent build as well, and eventually got it to
> work after going to the enable protocols dialog box and enabling NFS
> and RPC.
>
> However, I have not tried the same with 2.6.2 yet.

I got it to work by specifying both the source port and dest port as
Decode AS RPC.

-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)(传说杜康是酒的发明者)