I have a set of UDP messages with the same problem, they can be on different UDP ports, depending on alot of factors.
How do I get a dissector heuristic? Can you point me in the right direction on where to look please? ----- Original Message ----- From: "Jaap Keuter" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; "Developer support list for Wireshark" <[email protected]> Sent: Wednesday, February 14, 2007 11:00 AM Subject: Re: [Wireshark-dev] saving "User Specified Decodes" > Hi, > > Another way to help yourself, in case this is your own protocol dissector, > is to make the dissector heuristic. Then you never have to setup the > "decode as" at all! > > Thanx, > Jaap > > On Wed, 14 Feb 2007, Andy Howell wrote: > > > Hello, > > > > I just asked on the user list if there any way to save the "decode as" > > settings? It seems there is not. I have pcap files with the same > > protocol across many different UDP ports. Its very time consuming to go > > through each port one-by-one and set the protocol with the decode-as. > > > > I using wireshark 0.99.4 > > > > On the Analyze menu, there is a "User Specified Decodes" that shows my > > current settings. It does not have a way to save these. An option to > > save these in say ~/.wireshark/userdecodes would be really useful. > > > > If someone can point me in the right direction I'd be happy to try to > > implement that or something like it. > > > > Thanks, > > > > Andy > > > > _______________________________________________ > > Wireshark-dev mailing list > > [email protected] > > http://www.wireshark.org/mailman/listinfo/wireshark-dev > > > > > > _______________________________________________ > Wireshark-dev mailing list > [email protected] > http://www.wireshark.org/mailman/listinfo/wireshark-dev > _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
