First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Packet name is not displaying for few packets under info column

  • retag add tags

Hi,

we are migrating existing plugin code from wireshark 1x to 2x. when we try to open the collected pcap file using wireshark 2.6.3, it doesnt display packet name under info tab where as it is displaying in 1.12.8,btw this issue is not observed for all packets. btw used code to print column info is:

col_add_fstr(pinfo->cinfo, COL_INFO, "%s", "NRACH_INDICATION");

please help me in understanding the issue.

updated 2018-11-27 04:18:56 +0000
This post is a wiki. Anyone with karma >750 is welcome to improve it.
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

You probably have a construct like this:

if (tree)
{
     ....
     col_add_fstr(pinfo->cinfo, COL_INFO, "%s", "<text>");
     ....
}

This prevents the column info to be set, when relevant. Remove the condition and see what happens.

Jaap's avatar
13.7k
Jaap
answered 2018-11-27 18:20:46 +0000
edit flag offensive 0 remove flag delete link

Comments

there is no condition as you mentioned above. it is the first statement under any case statement

case NRACH_INDICATION:
{
    col_add_fstr(pinfo->cinfo, COL_INFO, "%s", "NRACH_INDICATION");
}

...

Kuru4634's avatar Kuru4634 (2018-11-28 07:36:25 +0000) edit

As all the other dissectors in Wireshark seem to able to update the info column as required, it looks like the issue is in your code. Without access to the source all we can really say is that you aren't calling the function you show when you should be. You'll have to break out a debugger and see what's happening on the frames that are affected.

grahamb's avatar grahamb (2018-11-28 10:23:57 +0000) edit

@Kuru4634: The fact that it's the first statement under the case statement says nothing. The whole switch-case construct could be wrapped in an 'if (tree)' condition. As @grahamb says, without access to your source we cannot tell.

Jaap's avatar Jaap (2018-11-28 12:14:05 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer