"Trailing stray characters" warning

edit

You have configured Show data as text in the Data dissector. The data you are showing as text is zero terminated inside the string so you will not see all the data as text. The warning is trying to tell you this, you have trailing characters which is not shown.

The warning is useful when found in a protocol having data which is text strings. It's not that useful in this case where you are "forcing" whatever data is found to be shown as text.

Maybe the text should be updated to be more clear what happened.

This has come in with this change. It warns about text which is contained in the protocol item, but does not normally appear on a display due to NULL character(s) in the string.

That data does not, in fact, appear to be text; either:

1. the protocol is not, in fact, a clear-text protocol;
2. it is a clear-text protocol, but it's encrypted, and the encrypted text is being displayed as if it were plaintext;
3. not all of the protocol is in clear text, but you're displaying the non-clear-text part as clear text;
4. the packet is being dissected by the dissector for that protocol, but it is, in fact, not traffic for that protocol;

etc..

This appears to be the result of the following 2 commits:

• https://code.wireshark.org/review/git...
• https://code.wireshark.org/review/git...

The implementation would appear to be flawed and a Wireshark bug report would seem to be in order here.