Wireshark ascii display: per-monitor DPI aware problem?
Hello folks, I just have seen a display problem with Wireshark. My Version is Version 3.0.1 (v3.0.1-0-gea351cd8) running on a Win10 machine (laptop) with 1 internal screen (1920 x 1080, 125%) and 2 external screens (1920 x 1200, 100%).
In my case, I am analyzing TCP data, but I think this doesn't matter. When I now place my wireshark window on the internal screen, then the package data is shown like this:
0000 xx yy xx yy xx yy xx yy xx yy xx yy xx yy xx yy aabbaabbaabbaabb
0010 xx yy xx yy xx yy xx yy xx yy xx yy xx yy xx yy aabbaabbaabbaabb
-->ascii representation of the package bytes on the right side
xx/yy: hex values, aa/bb: ascii representations of hex values
When I now move the wireshark window to one of the external screens, the window is re-sized (due to per-monitor DPI awareness, I think) and the ascii representation disappears. The package data then looks like this:
0000 xx yy xx yy xx yy xx yy xx yy xx yy xx yy xx yy
0010 xx yy xx yy xx yy xx yy xx yy xx yy xx yy xx yy
If I set one of the external monitors to 125% - like the internal one - the ascii data is shown correctly on this screen as well.
See the attachements for screenshots. I did nothing but move the wireshark window from internal to external screen, the ascii disappeared (red box). -->no attachements possible -- not enough "points", unfortunately.
Question: - Is this a known bug of wireshark? - how can I set wireshark to show ascii data on the 100% screens correctly?
Thank you for your answers!
How is your layout set, it's in Preferences -> Appearance -> Layout?
The settings are as default, no change there. In my setup, there is no "Preferences" menu item. (also because it is set to german...)
Under >Edit >Preferences I find nothing that changes the faulty behaviour.
Maybe under "Advanced" there could be a property belonging to that. But I did not change anything there. Any ideas where to search / what property name?
So by default I'm assuming you have a full width packet window at the top, a full width packet details window in the middle and a full width hex bytes window at the bottom, is this correct?
Also, do you have thee Wireshark application window set to full screen, or smaller than that?
yes, correct. And the ascii part is shown within the hex bytes window, located right side of the hex number blocks. It doesn't matter if I set to full screen, minimize, half-left / half-right or whatever: On the 100% screens, the ascii is not shown, on the "other-than-100%" scaline ones, the ascii is there.
When I put the wireshark window on the 125% external screen, then ascii is shown like described. When I then set the screen to 100%, the ascii still is there after rescaling the screen. I also can resize, rearrange the window on this screen - the ascii does not go away at 100%. It only disappears, when I select a different TCP packet to show details - or when I move the window to another screen and come back.
...still did not take my ftp server credentials with me - still cannot upload files from here....
do you have a suggestion for a public upload space? I made a screenpresso video that shows the problem very clearly.
Probably best to take this straight to the Wireshark Bugzilla and report the issue, you should be able to upload the video there. I don't think there's a quick fix.
here we go: google drive...! https://drive.google.com/drive/folder...
the video shows part of left screen (125%) and part of right screen (100%). One can see that the ascii appears/disappears while moving from one to the other screen.
Have you been able to reproduce this strange behaviour?
Nope, I don't have such a display setup, and dragging the window around my multi-monitors doesn't cause the issue.
I have filed a bug report now: 15819
If you resize the window, does the ASCII data reappear?