I have a set of UDP messages with the same problem, they can be on different
UDP ports, depending on alot of factors.
How do I get a dissector heuristic? Can you point me in the right direction
on where to look please?
----- Original Message -----
From: "Jaap Keuter" <jaap.keuter@xxxxxxxxx>
To: <AndyHowell@xxxxxxxxxxxxxxxxx>; "Developer support list for Wireshark"
<wireshark-dev@xxxxxxxxxxxxx>
Sent: Wednesday, February 14, 2007 11:00 AM
Subject: Re: [Wireshark-dev] saving "User Specified Decodes"
> Hi,
>
> Another way to help yourself, in case this is your own protocol dissector,
> is to make the dissector heuristic. Then you never have to setup the
> "decode as" at all!
>
> Thanx,
> Jaap
>
> On Wed, 14 Feb 2007, Andy Howell wrote:
>
> > Hello,
> >
> > I just asked on the user list if there any way to save the "decode as"
> > settings? It seems there is not. I have pcap files with the same
> > protocol across many different UDP ports. Its very time consuming to go
> > through each port one-by-one and set the protocol with the decode-as.
> >
> > I using wireshark 0.99.4
> >
> > On the Analyze menu, there is a "User Specified Decodes" that shows my
> > current settings. It does not have a way to save these. An option to
> > save these in say ~/.wireshark/userdecodes would be really useful.
> >
> > If someone can point me in the right direction I'd be happy to try to
> > implement that or something like it.
> >
> > Thanks,
> >
> > Andy
> >
> > _______________________________________________
> > Wireshark-dev mailing list
> > Wireshark-dev@xxxxxxxxxxxxx
> > http://www.wireshark.org/mailman/listinfo/wireshark-dev
> >
> >
>
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-dev
>