For instance, one of the packet has "Warning" severity, but "Expert Info Severity" only the least severe one for the packet, which is "Info," which is not the way it should work.
I'm using Version 4.4.5 (v4.4.5-0-g47253bcf3773)
Do you by any chance have selected a non-zero value for occurrence in the column definition? As your column only shows one severity level, while the frame details shows multiple.
In case there are multiple expert info message present in a frame, Wireshark 4.4.5 will indeed show all severity levels:
But with an occurrence other than zero, only one of the severities will be shown in the column.
I use the preset, and occurrence is empty
7.4.4. “Expert” Packet List Column (Optional)
An optional “Expert Info Severity” packet list column is available that displays the most significant severity of a packet or stays empty if everything seems OK.
Using the pre-defined column, you only get one. I believe the "most significant" logic is reversed.
Thought I had started a fix for this but can't find notes at the moment and don't see anything in the Wireshark issues.
Could you open a Wireshark Gitlab issue.
Thanks, done. Issue #20465
Asked: Apr 1 '5
Seen: 50 times
Last updated: Apr 01
