Where should i make "Try heuristic sub-dissectors first" change? I have currently built a heuristic dissector over tcp. thanks in advance
asked 17 Mar '11, 11:44
It's a preference on (among others) the TCP dissector. Edit->Preferences->Protocols->TCP and check or uncheck the appropriate box.
Some other protocols (UDP, SCTP, etc.) have similar preferences.
[Update] Don't forget to drop by and Accept this answer if it answered your question.