[Guy Harris <guy@xxxxxxxxxxxx>]

On Oct 12, 2003, at 8:58 AM, didier wrote:

> Heuristics are always tried, even if 'do not decode' is set in 'decode 
> as...' dialog box. Do not decode aren't shown in 'show current' too.

"Do not decode" means "remove an entry for the protocol and port", not 
"put in an entry that keeps it from ever being decoded as this", so 
there's nothing to show in "show current", and it doesn't affect 
heuristic dissectors.

If a heuristic dissector is dissecting traffic that's not for its 
protocol, that's a bug in the dissector.  When are you seeing this 
happen?

> May be we could remove 'do not decode' and define a new protocol 
> 'undecode' whatever?

We already support completely disabling protocols; would that be 
sufficient?