Ask Your Question

New computer / setup custom columns

asked 2022-12-22 18:17:22 +0000

Rob-GCI gravatar image

Setting up custom columns under a new profile. When I close Wireshark and reopen, the columns are gone. Checking the profile file, they show as still being there.

edit retag flag offensive close merge delete


Can you update the question with output of wireshark -v or Help->About Wireshark:Wireshark.

Chuckc gravatar imageChuckc ( 2022-12-22 20:01:12 +0000 )edit

Wireshark 4.0.2 (v4.0.2-0-g415456d13370).

Copyright 1998-2022 Gerald Combs [email protected] and contributors. Licensed under the terms of the GNU General Public License (version 2 or later). This is free software; see the file named COPYING in the distribution. There is NO WARRANTY; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) using Microsoft Visual Studio 2022 (VC++ 14.32, build 31332), with GLib 2.72.3, with PCRE2, with zlib 1.2.12, with Qt 5.15.2, with libpcap, with Lua 5.2.4, with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.10.1, with Kerberos (MIT), with MaxMind, with nghttp2 1.46.0, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.9.14, with libsmi 0.4.8, with QtMultimedia, with automatic updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled ...(more)

Rob-GCI gravatar imageRob-GCI ( 2022-12-22 20:07:58 +0000 )edit

Can you share the profile? (export from wireshark, stick the zip file on a public file share and add a link to it on the question)
Is it possible they got added/moved to the right of the Info column?

Chuckc gravatar imageChuckc ( 2022-12-23 01:48:25 +0000 )edit

2 Answers

Sort by ยป oldest newest most voted

answered 2022-12-23 15:11:11 +0000

Rob-GCI gravatar image

I actually figured out the problem. It did not like adding a column without a label. I had tried to enter a blank column on the side with no header. This would cause the columns I added to disappear.

Thanks for the help.

edit flag offensive delete link more


Could you open an issue on the Wireshark Gitlab issues page?

Chuckc gravatar imageChuckc ( 2022-12-23 15:52:45 +0000 )edit

I also re-opened the question, as we commonly don't close questions, so other people might benefit from the solution given when they encouter the same issue :-)

SYN-bit gravatar imageSYN-bit ( 2022-12-24 23:32:56 +0000 )edit

answered 2022-12-23 14:59:43 +0000

SYN-bit gravatar image

Can't reproduce myself on my Mac, things that come to mind are:

  • Did you have two wireshark windows open and the last one closed did not have the columns in it yet?
  • Did wireshark open with the new profile activated or with the default profile (could e a result too of having multiple wireshark programs running simultaneously and closing them in an unfortunate order).
  • Does wireshark have writing rights to the folder where the profiles are saved?
edit flag offensive delete link more


I can replicate with duplicate columns - same field added twice. I have see appear to get flagged by Wireshark, but on import of older profiles, I don't see the warning but do get the behavior.

Bob Jones gravatar imageBob Jones ( 2022-12-23 16:07:26 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2022-12-22 18:17:22 +0000

Seen: 238 times

Last updated: Dec 23 '22