Wireshark-bugs: [Wireshark-bugs] [Bug 7008] TCP picks wrong sub-dissector if both dissector choi
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 2 Apr 2012 06:14:42 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7008

Michael Mann <mmann78@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #8126|                            |review_for_checkin?
              Flags|                            |

--- Comment #3 from Michael Mann <mmann78@xxxxxxxxxxxx> 2012-04-02 06:14:42 PDT ---
Created attachment 8126
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=8126
Use SYN or SYN|ACK to determine dissector chosen

The attached patch uses the SYN or SYN|ACK packet (if captured) to determine
the TCP "server port" and uses that as a "first guess", rather than "lower
value port".  This allows the attached traces to be properly dissected.

I'm surprised this wasn't implemented already, so perhaps I'm missing a good
reason?  Minimally I would at least like to make this functionality a
preference (even better if it can default to "on")

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.