Wireshark-users: Re: [Wireshark-users] DCERPC over TCP

From: Chris Maynard <Chris.Maynard@xxxxxxxxx>
Date: Tue, 27 Dec 2011 18:54:48 +0000 (UTC)
Andrej van der Zee <andrejvanderzee@...> writes:

> Shouldn't the heuristic sub-dissector for DCERPC be favored over the
> port-registered GTP dissector.

Are you able to post a small capture file depicting this?