Wireshark · Ethereal-dev: Re: [Ethereal-dev] RFC: ability to show protocol field errors

[Matthijs Melchior <mmelchior@xxxxxxxxx>]

Hi,

Biot Olivier wrote:

> Hi all,
>
> How about adding a boolean to every protocol field in the protocol tree, so
> it would be easy to track protocol errors by just looking at protocol
> fields?
>
> The tree view could for example display the following:
> ! [-] User Datagram Protocol, Src Port: 12345 (12345), Dst Port: 23 (telnet)
>        Source port: 12345 (12345)
>        Destination port: 23 (telnet)
>        Length: 14
>      ! Checksum: 0xcafe (Incorrect, should be 0xbabe)
>      Telnet data
>
> We could also choose to use an italic font and/or color inversion
> to highlight errors...
>
> Regards,
>
> Olivier
>  
Yes, I have been experimenting with an enum added to field_info and
using that to set the background color of protocol tree item. This color
is also applied to all enclosing pdu's in order to notice the presence
of a property without having to expand all sublevels.

This enum is to be set based on the outcome of the packet selection
expression and your proposal would be implemented using the following:
"tcp.checksum_bad == 1 || frame".

The code is not complete enough to be submitted as a patch.
Some encouragement may help complete it, though...

--
Regards,
----------------------------------------------------------------  -o)
Matthijs Melchior                                       Maarssen  /\\
mmelchior@xxxxxxxxx                                  Netherlands _\_v
---------------------------------------------------------------- ----