1 | initial version |
The raknet
dissector is a heuristic dissector that has no preferences to specify a port.
It could a fluke that your traffic matches the weak heuristic test for a match.
epan/dibe ssectors/packet-raknet.c
test_raknet_heur(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree _U_, void* data _U_) { if (tvb_memeql(tvb, 1 + 8, RAKNET_OFFLINE_MESSAGE_DATA_ID, sizeof(RAKNET_OFFLINE_MESSAGE_DATA_ID)) == 0) { /* ID_UNCONNECTED_PING */ return TRUE; } ...
Disable it (Analyze -> Enabled Protocols... -> Search:
"raknet") and see if another dissector claims the packets.
2 | No.2 Revision |
The raknet
dissector is a heuristic dissector that has no preferences to specify a port.
It could be a fluke that your traffic matches the weak heuristic test for a match.
epan/dibe ssectors/packet-raknet.c
test_raknet_heur(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree _U_, void* data _U_) { if (tvb_memeql(tvb, 1 + 8, RAKNET_OFFLINE_MESSAGE_DATA_ID, sizeof(RAKNET_OFFLINE_MESSAGE_DATA_ID)) == 0) { /* ID_UNCONNECTED_PING */ return TRUE; } ...
Disable it (Analyze -> Enabled Protocols... -> Search:
"raknet") and see if another dissector claims the packets.