Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

The raknet dissector is a heuristic dissector that has no preferences to specify a port.
It could a fluke that your traffic matches the weak heuristic test for a match.
epan/dibe ssectors/packet-raknet.c

test_raknet_heur(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree _U_, void* data _U_)
{
    if (tvb_memeql(tvb, 1 + 8, RAKNET_OFFLINE_MESSAGE_DATA_ID, sizeof(RAKNET_OFFLINE_MESSAGE_DATA_ID)) == 0) {
        /* ID_UNCONNECTED_PING */
        return TRUE;
    }
...


Disable it (Analyze -> Enabled Protocols... -> Search: "raknet") and see if another dissector claims the packets.

The raknet dissector is a heuristic dissector that has no preferences to specify a port.
It could be a fluke that your traffic matches the weak heuristic test for a match.
epan/dibe ssectors/packet-raknet.c

test_raknet_heur(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree _U_, void* data _U_)
{
    if (tvb_memeql(tvb, 1 + 8, RAKNET_OFFLINE_MESSAGE_DATA_ID, sizeof(RAKNET_OFFLINE_MESSAGE_DATA_ID)) == 0) {
        /* ID_UNCONNECTED_PING */
        return TRUE;
    }
...


Disable it (Analyze -> Enabled Protocols... -> Search: "raknet") and see if another dissector claims the packets.