This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

while building a dissector, Is it possible to declare an error on the upper box?

0

Hey, I'm building a dissector and wanted to know if it is possible declare an error on the upper box, where all the packets are (tcp ...)

By declaring I mean to get the color of the column red...

I know it is possible to declare and color the column in red on the middle box (where the description of the packets is found), but I want to see if it is also possible to the upper box...

Or, the only way to do it is to make it by the hand with view>>coloring rules and create some error flag which will be up in an error, and then I'll color it ?

thanks ahead

asked 09 Dec '12, 02:24

hudac's gravatar image

hudac
61111317
accept rate: 50%


2 Answers:

1

Use expert_add_info_format() to add an error flag to the packet, which will make the row in the middle pane red, and then add a coloring rule with a filter expression of

expert.severity == "Error"

(exactly like that, complete with the quotes around Error) and with your choice of background color (red, presumably - #FF5C5C is probably closes to the red used in the packet detail pane). Put that rule at the beginning of the list of coloring rules, so that it overrides all rules below it.

answered 14 Dec '12, 23:58

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

0