Wireshark · Wireshark-users: Re: [Wireshark-users] RTP decoded as DPLAY in V1.0.0

["Keith French" <keithfrench@xxxxxxxxxxxxx>]

Yes if you disable DPLAY in the "Enabled Protocols", it correctly decodes as 
RTP.

Now that Bugzilla is back up again, I have entered it as bug 2452.

----- Original Message ----- 
From: "Stephen Fisher" <stephentfisher@xxxxxxxxx>
To: "Community support list for Wireshark" <wireshark-users@xxxxxxxxxxxxx>
Sent: Friday, April 11, 2008 6:45 PM
Subject: Re: [Wireshark-users] RTP decoded as DPLAY in V1.0.0


> On Fri, Apr 11, 2008 at 04:24:00PM +0100, Martin Mathieson wrote:
>
> > Like Jaap says, its either on a port that DPLAY thinks indicates DPLAY
> > traffic, or DPLAY has an over-zealous heuristic dissector that think
> > its found a DPLAY frame. Did you try to diable the DPLAY dissector as
> > he suggested?
>
> Dplay is a heuristic dissector that needs to have its heuristics
> tightened since this is happening.  I would say that opening a bug with
> us is the appropriate course of action while disabling dplay is a
> work-around.
>
>
> Steve
>
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users


--------------------------------------------------------------------------------


No virus found in this incoming message.
Checked by AVG.
Version: 7.5.519 / Virus Database: 269.22.12/1374 - Release Date: 11/04/2008 
16:59