Wireshark-users: Re: [Wireshark-users] RTP decoded as DPLAY in V1.0.0
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Fri, 11 Apr 2008 11:45:20 -0600
On Fri, Apr 11, 2008 at 04:24:00PM +0100, Martin Mathieson wrote:

> Like Jaap says, its either on a port that DPLAY thinks indicates DPLAY 
> traffic, or DPLAY has an over-zealous heuristic dissector that think 
> its found a DPLAY frame. Did you try to diable the DPLAY dissector as 
> he suggested?

Dplay is a heuristic dissector that needs to have its heuristics 
tightened since this is happening.  I would say that opening a bug with 
us is the appropriate course of action while disabling dplay is a 
work-around.


Steve