Haxthausen's profile - activity

Hi there,

On the latest version of Wireshark (3.2.0), when I right click on the “Packet List” columns header, the pop-up menu with the list of defined columns available to display shows also the columns type/fields on the right of the column title, whereas before only the columns title was displayed, as seen here.

This results on columns list pop-up menu being unusable for quick selection of columns in my case, as I have many defined, some of which with many fields.

Is this the new standard behavior after some software change or could it be a bug? If it is standard behavior is this possible to change back to previous one? I couldn't find any config parameter...

Thank you, Hax.

Hello,

Is there a limit to the custom columns fields that can be specified, be it in number of fields or total number of characters of the "Fields" string?

For example, I have a custom column with the following definition on the preferences file and it works fine.

"PDN Address IPv4", "%Cus:gtp.user_ipv4 || gtp.pdp_address.ipv4 || gtpv2.pdn_addr_and_prefix.ipv4 || radius.Framed-IP-Address || diameter.Framed-IP-Address.IPv4 || diameter.PDP-Address.IPv4 || gprscdr.iPBinV4Address || diameter.UE-Local-IP-Address.IPv4:0:R",

When I add a new field via the GUI, e.g. pfcp.ue_ip_addr_ipv4, it works ok and the custom column immediately reflects the change, but when I close and reopen Wireshark all my columns are gone like if Wireshark could not read my preferences and after a bit of troubleshooting I realized that the big column below was to blame and as soon as I commented it or removed the last added field Wireshark could load all my columns again just fine.

"PDN Address IPv4", "%Cus:gtp.user_ipv4 || gtp.pdp_address.ipv4 || gtpv2.pdn_addr_and_prefix.ipv4 || radius.Framed-IP-Address || diameter.Framed-IP-Address.IPv4 || diameter.PDP-Address.IPv4 || gprscdr.iPBinV4Address || diameter.UE-Local-IP-Address.IPv4 || pfcp.ue_ip_addr_ipv4:0:R",

So I understand there is some kind of limit, so is it by number of fields or by total size of the custom column string definition?

Regardless of the type of limit, would it be possible to increase it? I analyse traces with many protocols with different fields for the same thing, like PDN Address in my example, so it would be great if I could continue using single custom columns for all the fields...

Moreover, when I add the new field on the Columns Preferences GUI there is no error, so given that there is a limit it would be good that the GUI could reflect it and warn about it or return an error if the limit was exceeded.

Thank you so much in advance for the feedback and support.

Kind regards, Hax.

Following issue submitted. Custom Columns Fields limit (#16905) · Issues · Wireshark Foundation / wireshark · GitLab ht

Thank you for the feedback. I would prefer not having to recompile Wireshark myself. :D I understand then that there's r

Custom Columns Fields limit? Hello, Is there a limit to the custom columns fields that can be specified, be it in numbe

I might need any combination of the configured columns at any given time, it's not like I can separate different sets of

Ok, I'll do. Thank you.

See for example here how my columns currently show on the pop-up menu. The last visible column is "MNC", however the lis

Good to know. I would say either add a preference to disable the functionality or change how the columns are displayed

How to remove columns type/fields from “Packet List” columns header right click pop-up menu? Hi there, On the latest ve

How to remove columns type/fields from “Packet List” columns header right click pop-up menu? Hi there, On the latest ve