[Ariel Burbaickij <ariel.burbaickij@xxxxxxxxx>]

Hello all,

we observe that wireshark correctly decodes SIP over non-standard UPD port, even where it is undesirable for our purposes in this case. All options that we are aware of that would control such behaviour like trying heuristic dissectors are on OFF.  So, how is it done (analyzing the text behind the UDP header?) and how can it be prevented ?

Kind Regards

Ariel Burbaickij