Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

answered 2020-07-16 06:49:35 +0000

Anders gravatar image

Hi, It seams like it's only dissected over cotp

    heur_dissector_add("cotp", dissect_ses_heur, "SES over COTP", "ses_cotp", proto_ses, HEURISTIC_ENABLE);
heur_dissector_add("cotp_is", dissect_ses_heur, "SES over COTP (inactive subset)", "ses_cotp_is", proto_ses, HEURISTIC_ENABLE);

You could open up a bug report requesting an enhancement to dissect SES over UDP but you'll ned to attach a trace to the bug in order for someone to test a solution.