MINOR: contrib: Enhance peers dissector heuristic.
When receiving a stick-table message header as two first bytes of a TCP segement
we consider this as being part of a peer protocol session.
diff --git a/contrib/wireshark-dissectors/peers/packet-happp.c b/contrib/wireshark-dissectors/peers/packet-happp.c
index 32c0ec2..43babd2 100644
--- a/contrib/wireshark-dissectors/peers/packet-happp.c
+++ b/contrib/wireshark-dissectors/peers/packet-happp.c
@@ -1624,6 +1624,14 @@
proto_strlen = strlen(HAPPP_PROTOCOL);
+ if (tvb_captured_length(tvb) < 2)
+ return FALSE;
+
+ if (tvb_get_guint8(tvb, 0) == PEER_MSG_CLASS_STICKTABLE &&
+ tvb_get_guint8(tvb, 1) >= PEER_MSG_STKT_UPDATE &&
+ tvb_get_guint8(tvb, 1) <= PEER_MSG_STKT_ACK)
+ goto found;
+
if (tvb_captured_length(tvb) < proto_strlen + 1)
return FALSE;
@@ -1634,6 +1642,7 @@
tvb_get_guint8(tvb, proto_strlen) != ' ')
return FALSE;
+ found:
conversation = find_or_create_conversation(pinfo);
if (!conversation)
return FALSE;