THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question

Revision history  [back]

Revision 1
Anders's avatar
5k
Anders
answered 2020-07-16 06:49:35 +0000

Hi, It seams like it's only dissected over cotp

    heur_dissector_add("cotp", dissect_ses_heur, "SES over COTP", "ses_cotp", proto_ses, HEURISTIC_ENABLE);
heur_dissector_add("cotp_is", dissect_ses_heur, "SES over COTP (inactive subset)", "ses_cotp_is", proto_ses, HEURISTIC_ENABLE);

You could open up a bug report requesting an enhancement to dissect SES over UDP but you'll ned to attach a trace to the bug in order for someone to test a solution.