Where should i make "Try heuristic sub-dissectors first" change? I have currently built a heuristic dissector over tcp. thanks in advance asked 17 Mar '11, 11:44  niks3089 |
One Answer:
It's a preference on (among others) the TCP dissector. Edit->Preferences->Protocols->TCP and check or uncheck the appropriate box. Some other protocols (UDP, SCTP, etc.) have similar preferences. [Update] Don't forget to drop by and Accept this answer if it answered your question. answered 17 Mar '11, 13:25  JeffMorriss ♦ edited 09 Mar '12, 07:03 |
