First time here? Check out the FAQ!

Ask Your Question
0

Force DPLAY dissector

asked Aug 29 '18

Hermann gravatar image

Hi

I am trying to examine the network traffic of an old DirectPlay 9 based game. The DPLAY dissector plugin is enabled, but it is not actually dissecting. I cannot even force it in the "Decode as…" dialouge since the dissector does not show up in the list. I did similar experiments a couple of years ago. Back then, everything worked out of the box. What am I doing wrong today?

In case it helps, I uploaded a capture containing some packets I want to have dissected: http://ssl.hehoe.de/temp/dplaylobby.p...

Kind Regards
Hermann

Preview: (hide)

1 Answer

Sort by » oldest newest most voted
0

answered Aug 29 '18

Guy Harris gravatar image

updated Aug 29 '18

The dissector is solely a heuristic dissector, so it's not one that can be used with "Decode as...".

The heuristic was broken by a change to optimize the heuristics (although I'm not sure whether the resulting code was measured as being faster). Please file a bug on this on the Wireshark Bugzilla, so we can record that it is buggy and track the process of fixing it; attach the capture file in question to the bug.

Preview: (hide)
link

Comments

Bug 15092 was raised for this and it was fixed in master by change 29351.

You can either grab an automated build, or wait for a new release of the version you're running (as long as it's a supported version). As we just released yesterday, it will probably be 6 weeks or so until the next release.

grahamb gravatar imagegrahamb ( Aug 30 '18 )

Wow, that was surprisingly fast! I just built from git. Working as intended. :) Thank you. 👍

Hermann gravatar imageHermann ( Aug 30 '18 )

That was another option which I'd left out!

grahamb gravatar imagegrahamb ( Aug 30 '18 )

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: Aug 29 '18

Seen: 640 times

Last updated: Aug 29 '18