Wireshark-dev: Re: [Wireshark-dev] Transport name resolution considered harmful?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 23 Apr 2012 11:24:02 -0700
On Apr 23, 2012, at 11:11 AM, Stephen Fisher wrote:

> It still has useful matches including, but not limited to:
> 
>  ssh (22)
>  domain (53)
>  http (80)
>  microsoft-ds (445)
>  router (520) <- (I know, scary RIP...)

Note that we have dissectors for all of those (and that the names aren't the protocol names, e.g. "domain" rather than "DNS", "microsoft-ds" rather than "SMB", "router" rather than "RIP").  The issues are probably mostly with the protocols not used enough to have Wireshark dissectors.

Perhaps we should, instead, have our own table of port numbers->protocol names.