Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Wireshark has two ways of "selecting" next protocol on UDP,TCP or SCTP ports. One is if the dissector register for a port the secondi is a "heuristic" which looks into the packet and try to see if it's a packet for this protocol. So if a packet shows up as UDP it just means that there is no protocol dissector assigned to this port and no heuristic claimed the packet. The default port of OpenVPN is 1194 so only packets on that port will be claimed by the dissecyor.

Wireshark has two ways of "selecting" next protocol on UDP,TCP or SCTP ports. One is if the dissector register for a port the secondi second is a "heuristic" which looks into the packet and try to see if it's a packet for this protocol. So if a packet shows up as UDP it just means that there is no protocol dissector assigned to this port and no heuristic claimed the packet. The default port of OpenVPN is 1194 so only packets on that port will be claimed by the dissecyor.dissecor.