Wireshark tries to be too clever with port numbers