Ask Your Question
0

"Expert Info Severity" column doesn't show the most severe severity.

asked 2025-04-01 20:47:10 +0000

given0042 gravatar image

updated 2025-04-01 20:52:12 +0000

For instance, one of the packet has "Warning" severity, but "Expert Info Severity" only the least severe one for the packet, which is "Info," which is not the way it should work.

I'm using Version 4.4.5 (v4.4.5-0-g47253bcf3773)

image description

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted
0

answered 2025-04-01 22:08:57 +0000

SYN-bit gravatar image

Do you by any chance have selected a non-zero value for occurrence in the column definition? As your column only shows one severity level, while the frame details shows multiple.

In case there are multiple expert info message present in a frame, Wireshark 4.4.5 will indeed show all severity levels:

image description

But with an occurrence other than zero, only one of the severities will be shown in the column.

edit flag offensive delete link more

Comments

I use the preset, and occurrence is empty

https://i.imgur.com/67DDgWi.pnghttps://i.imgur.com/67DDgWi.png

given0042 gravatar imagegiven0042 ( 2025-04-01 22:48:01 +0000 )edit

7.4.4. “Expert” Packet List Column (Optional)

An optional “Expert Info Severity” packet list column is available that displays the most significant severity of a packet or stays empty if everything seems OK.


Using the pre-defined column, you only get one. I believe the "most significant" logic is reversed.
Thought I had started a fix for this but can't find notes at the moment and don't see anything in the Wireshark issues.
Could you open a Wireshark Gitlab issue.

Chuckc gravatar imageChuckc ( 2025-04-01 23:35:54 +0000 )edit

Thanks, done. Issue #20465

given0042 gravatar imagegiven0042 ( 2025-04-02 00:10:40 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2025-04-01 20:47:10 +0000

Seen: 32 times

Last updated: yesterday