Revision history  [back]

Heuristic dissectors.

A heuristic dissector, such as http, registers for all TCP traffic, and if there no dissector has registered for the port the traffic has been received on, then the TCP dissector calls each heuristic dissector in turn, and each dissector inspects the traffic and decides if it "looks right", and if so dissects it, else declines and passes the opportunity to the next dissector.

See README.heuristic for more info.