The DPD (dynamic protocol detection) activates port-independent protocol detection and selectively disables analyzers if protocol violations occur.
base/frameworks/dpd/__load__.bro
Activates port-independent protocol detection and selectively disables analyzers if protocol violations occur.