Revision history [back]
The Wireshark bittorrent dissector uses two methods to identify bittorrent traffic:
- It uses a range of TCP ports
- It uses a heuristic analysis of the packet consisting of:
- minimum payload length
- a length indication
- an identification string
If there are others, these are not (yet) implemented in the dissector.