I have vendor that arbitrarily picked TCP port 7000 for their application. This application is only run local LAN or via VPN through port forwarding so it would not ever appear on the Internet. Port 7000 was used by the Gryphon Protocol. Periodically, Wireshark actually interprets a packet as a Gryphon packet which messes things up like trying to reassemble segments from multiple packets. Is there a way to filter the protocol but keep the data or make Wireshark "blind" to the protocol? Thanks.
