| 1 | initial version |
The raknet dissector is a heuristic dissector that has no preferences to specify a port.
It could a fluke that your traffic matches the weak heuristic test for a match.
epan/dibe ssectors/packet-raknet.c
test_raknet_heur(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree _U_, void* data _U_)
{
if (tvb_memeql(tvb, 1 + 8, RAKNET_OFFLINE_MESSAGE_DATA_ID, sizeof(RAKNET_OFFLINE_MESSAGE_DATA_ID)) == 0) {
/* ID_UNCONNECTED_PING */
return TRUE;
}
...
Disable it (Analyze -> Enabled Protocols... -> Search: "raknet") and see if another dissector claims the packets.
| 2 | No.2 Revision |
The raknet dissector is a heuristic dissector that has no preferences to specify a port.
It could be a fluke that your traffic matches the weak heuristic test for a match.
epan/dibe ssectors/packet-raknet.c
test_raknet_heur(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree _U_, void* data _U_)
{
if (tvb_memeql(tvb, 1 + 8, RAKNET_OFFLINE_MESSAGE_DATA_ID, sizeof(RAKNET_OFFLINE_MESSAGE_DATA_ID)) == 0) {
/* ID_UNCONNECTED_PING */
return TRUE;
}
...
Disable it (Analyze -> Enabled Protocols... -> Search: "raknet") and see if another dissector claims the packets.