Specifically: a little research verifies that the correct
heuristic is: Succeed if the byte at offset 0 is an STX *and* the
bytes at offset 3/4 correspond to a valid OICQ command.
The code was actually effectively doing an *or* and thus the
heuristic was quite weak.
svn path=/trunk/; revision=27619
Changed OICQ dissector to be a new style dissector that checks to make sure
two of the fields match defined string values before continuing dissection.
svn path=/trunk/; revision=25317