Wireshark-bugs: [Wireshark-bugs] [Bug 5462] NDMP dissector not handling fragment header in one f

Date: Thu, 27 Jun 2013 12:20:02 +0000

changed bug 5462

What Removed Added
Attachment #11084 Flags   review_for_checkin?

Comment # 1 on bug 5462 from
Created attachment 11084 [details]
Have NDMP explicitly use port 10000

The issue here is that the heuristics of NDMP require 28 bytes to be present in
order for it to be dissected as NDMP.  NDMP is purely a heuristic dissector
because TCPENCAP shares the same TCP port.
Since NDMP officially registered port 10000 with IANA, allow it to use
dissector_add_uint() instead of packet-ipsec-tcp.c, and by default have
TCPENCAP only rely on its heuristics.


You are receiving this mail because:
  • You are the assignee for the bug.
  • You are watching all bug changes.