Wireshark-dev: Re: [Wireshark-dev] Question in wireshark plugin development, how to solve the c

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Mon, 14 May 2007 15:34:06 -0700
On Mon, May 14, 2007 at 10:18:08AM +0800, li yang wrote:

> But I found if we use the port (already registered by other protocol) 
> in our protocol,the data can not be parsed correctly. eg,if we send 
> the data in port 4000, it will confict with ICQ.That's to say, the 
> data will be parsed as ICQ data not our portocol. :(
> 
> You know, our protocol using random port to send data. Do you have any 
> solution on that?

The way around this is to check the option in the UDP preferences to 
"Try heuristic sub-dissectors first" so your dissector can be tried 
before the ones with hard-coded port numbers.


Steve