Ethereal-dev: RE: [Ethereal-dev] dissector port clash (e.g. SNMP vs. TFTP)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Biot Olivier <Olivier.Biot@xxxxxxxxxxx>
Date: Tue, 11 May 2004 17:35:11 +0200
|From: Thomas Anders
|
|If UDP packets in the same capture use the same (non-well-known) source
|port for different protocols, the first dissector "wins", i.e. tries
|to dissect all those packets, even for the other protocols.
|Even worse, I've been unable to change this behaviour with "Decode As".
|
|The attached sample capture file illustrate the problem. The first
|two packets (SNMP) are dissected fine in my Ethereal (CVS), but the
|other three (TFTP) are not, because they're dissected as SNMP.
|
|Am I missing something obvious? Otherwise, can there anything be done
|about it?

The only workaround today is to disable the unwanted protocol by choosing
"Analyze" --> "Enabled protocols" and untick SNMP from the list".

Regards,

Olivier