How can I see the protocol number instead of protocol name? In Wireshark I just see the name of the protocol like "SIGCOMP" or "QUIC". I need the protocol number for ACL. I need to block/disable the "SIGCOMP" and "QUIC" protocol. asked 18 Jan '15, 21:11  appreciated |
2 Answers:
At least for sigcomp I think the packets are actually over tcp or udp on port 5060 - right? So in fact it's not sigcomp. You should look at blocking port 5060 if you don't have any sip traffic. answered 18 Jan '15, 22:35  Anders ♦ |
You can always see the port numbers in the UDP/TCP part of the packet details pane. If you want to see the numbers in the packet list, you can disable name resolution for the transport layer (View -> Name Resolution -> Enable for transport layer) answered 19 Jan '15, 01:14  SYN-bit ♦♦ |
