First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

New computer / setup custom columns

Setting up custom columns under a new profile. When I close Wireshark and reopen, the columns are gone. Checking the profile file, they show as still being there.

Rob-GCI's avatar
16
Rob-GCI
asked 2022-12-22 18:17:22 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Can you update the question with output of wireshark -v or Help->About Wireshark:Wireshark.

Chuckc's avatar Chuckc (2022-12-22 20:01:12 +0000) edit

Wireshark 4.0.2 (v4.0.2-0-g415456d13370).

Copyright 1998-2022 Gerald Combs [email protected] and contributors. Licensed under the terms of the GNU General Public License (version 2 or later). This is free software; see the file named COPYING in the distribution. There is NO WARRANTY; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) using Microsoft Visual Studio 2022 (VC++ 14.32, build 31332), with GLib 2.72.3, with PCRE2, with zlib 1.2.12, with Qt 5.15.2, with libpcap, with Lua 5.2.4, with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.10.1, with Kerberos (MIT), with MaxMind, with nghttp2 1.46.0, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.9.14, with libsmi 0.4.8, with QtMultimedia, with automatic updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled ... (more)

Rob-GCI's avatar Rob-GCI (2022-12-22 20:07:58 +0000) edit

Can you share the profile? (export from wireshark, stick the zip file on a public file share and add a link to it on the question)
Is it possible they got added/moved to the right of the Info column?

Chuckc's avatar Chuckc (2022-12-23 01:48:25 +0000) edit
add a comment see more comments

2 Answers

0

I actually figured out the problem. It did not like adding a column without a label. I had tried to enter a blank column on the side with no header. This would cause the columns I added to disappear.

Thanks for the help.

Rob-GCI's avatar
16
Rob-GCI
answered 2022-12-23 15:11:11 +0000
edit flag offensive 0 remove flag delete link

Comments

Could you open an issue on the Wireshark Gitlab issues page?

Chuckc's avatar Chuckc (2022-12-23 15:52:45 +0000) edit

I also re-opened the question, as we commonly don't close questions, so other people might benefit from the solution given when they encouter the same issue :-)

SYN-bit's avatar SYN-bit (2022-12-24 23:32:56 +0000) edit
Chuckc's avatar Chuckc (2022-12-29 12:43:24 +0000) edit
add a comment see more comments
0

Can't reproduce myself on my Mac, things that come to mind are:

  • Did you have two wireshark windows open and the last one closed did not have the columns in it yet?
  • Did wireshark open with the new profile activated or with the default profile (could e a result too of having multiple wireshark programs running simultaneously and closing them in an unfortunate order).
  • Does wireshark have writing rights to the folder where the profiles are saved?
SYN-bit's avatar
18.5k
SYN-bit
answered 2022-12-23 14:59:43 +0000
edit flag offensive 0 remove flag delete link

Comments

I can replicate with duplicate columns - same field added twice. I have see appear to get flagged by Wireshark, but on import of older profiles, I don't see the warning but do get the behavior.

Bob Jones's avatar Bob Jones (2022-12-23 16:07:26 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer