This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

“Try heuristic sub-dissectors first”

1

Where should i make "Try heuristic sub-dissectors first" change? I have currently built a heuristic dissector over tcp. thanks in advance

asked 17 Mar '11, 11:44

niks3089's gravatar image

niks3089
21151518
accept rate: 0%


One Answer:

3

It's a preference on (among others) the TCP dissector. Edit->Preferences->Protocols->TCP and check or uncheck the appropriate box.

Some other protocols (UDP, SCTP, etc.) have similar preferences.

[Update] Don't forget to drop by and Accept this answer if it answered your question.

answered 17 Mar '11, 13:25

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572
accept rate: 27%

edited 09 Mar '12, 07:03