On Dec 28, 2018, at 2:36 PM, Yang Yu <yang.yu.l...@gmail.com> wrote: > On Fri, Dec 28, 2018 at 1:07 PM Guy Harris <g...@alum.mit.edu> wrote: >> From looking at the code, the logic appears to be "is the traffic to or from >> UDP port 6635?" >> >> So *is* the traffic to or from UDP port 6635? > > indeed udp.dstport is 6635 (IANA assigned for mpls-udp), so it turned > out a host was using udp/6635 as ephemeral port to connect to a STUN > server
So, for this case, follow Hugo van der Kooij's suggestion and disable the MPLS dissector. ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users@wireshark.org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-requ...@wireshark.org?subject=unsubscribe
