Wireshark-bugs: [Wireshark-bugs] [Bug 11152] Wireshark decodes some valid RTP packets as STUN pa
Date: Sat, 04 Jul 2015 02:41:27 +0000

Comment # 8 on bug 11152 from
During testing of this issue and a fix for it, I found several other related
issues with weak heuristic checks:
    1) the CATTP heuristic dissector is weak and matched some packets.
    2) the TFTP heuristic dissector matched data inside TURN ChannelData that
it shouldn't have, and couldn't be turned off.
    3) the RTP heuristic dissector couldn't be turned on/off for use inside
TURN ChannelData separately from UDP.
    4) the RTCP heuristic dissector also couldn't be turned on/off for use
inside TURN ChannelData separately from UDP, and performed a odd-port check
even when inside TURN ChannelData.

I'll address those in separate code changes, and separate bugs.  Mostly because
some might need to be back-ported (or not).


You are receiving this mail because:
  • You are watching all bug changes.