Wireshark mailing list archives
Re: MPLS over UDP decoding
From: Guy Harris <guy () alum mit edu>
Date: Fri, 28 Dec 2018 18:38:51 -0800
On Dec 28, 2018, at 2:36 PM, Yang Yu <yang.yu.list () gmail com> wrote:
On Fri, Dec 28, 2018 at 1:07 PM Guy Harris <guy () alum mit edu> wrote:From looking at the code, the logic appears to be "is the traffic to or from UDP port 6635?" So *is* the traffic to or from UDP port 6635?indeed udp.dstport is 6635 (IANA assigned for mpls-udp), so it turned out a host was using udp/6635 as ephemeral port to connect to a STUN server
So, for this case, follow Hugo van der Kooij's suggestion and disable the MPLS dissector. ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- MPLS over UDP decoding Yang Yu (Dec 27)
- Re: MPLS over UDP decoding Hugo van der Kooij (Dec 27)
- Re: MPLS over UDP decoding Guy Harris (Dec 28)
- Re: MPLS over UDP decoding Yang Yu (Dec 28)
- Re: MPLS over UDP decoding Guy Harris (Dec 28)
- Re: MPLS over UDP decoding Yang Yu (Dec 28)