ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 10968] New: blank info column can be observed when filteri

Date: Mon, 16 Feb 2015 08:10:18 +0000
Bug ID 10968
Summary blank info column can be observed when filtering the log
Product Wireshark
Version 1.99.x (Experimental)
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Major
Priority Low
Component Qt UI
Assignee [email protected]
Reporter [email protected]

Created attachment 13453 [details]
blank info column

Build Information:
Version 1.99.3 (v1.99.3rc0-116-g03c7224 from unknown)

Copyright 1998-2015 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with Qt 5.4.0, with WinPcap (4_1_3), with libz 1.2.5, with
GLib 2.38.0, with SMI 0.4.8, with c-ares 1.9.1, with Lua 5.2, with GnuTLS
3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, without PortAudio,
with AirPcap.

Running on 32-bit Windows 7 Service Pack 1, build 7601, with locale C, without
WinPcap, with GnuTLS 3.2.15, with Gcrypt 1.6.2, without AirPcap.
Intel(R) Core(TM) i3 CPU       M 350  @ 2.27GHz (with SSE4.2), with 2991MB of
physical memory.


Built using Microsoft Visual C++ 12.0 build 21005
--
  The blank info column can be observed when filtering the log as attached
picture. In attached picture, the first 3 packets didn't display info column
and the Protocol column displays "L2", but they all belonged to customized
"80d" Protocol as the remaining packets. And these 3 packets are dissected
correctly as "80d" Protocol in tree view. However the corresponding inform
column has blank content. 
  The info column of first 3 packets displays normally after I reload the log
by Ctrl + R.
  There is no such issue for wireshark GTK+. 

Note: I comment the setText("") in order to reserving the display filter when
reloading the log by Ctrl + R.
void MainWindow::captureFileClosed() 
{
    if (df_combo_box_)
    {
        //df_combo_box_->lineEdit()->setText("");
        df_combo_box_->applyDisplayFilter();
    }
}

The code to dissect 80d trace:
static void dissect_trace_80d(tvbuff_t *tvb, packet_info *pinfo, proto_tree
*tree)
{
  proto_item *info_item = NULL;
  proto_tree *info_tree = NULL;
  guint8 infoString[COL_MAX_INFO_LEN];

  col_set_str(pinfo->cinfo, COL_PROTOCOL, "80d");
  proto_tree_add_string(tree, hf_alf_80d_trace_name, tvb, 0, 0,
"TRACE_DLT_CEI_UL_PUSCH");

  sprintf(infoString, "ueid=%03d sfn=%04d.%1d crc=%1d",
                      (tvb_get_ntohs(tvb, 0)&0xFFC0)>>6, //ueid
                      (tvb_get_ntohs(tvb, 2)&0xFFF0)>>4, //sfn
                      (tvb_get_ntohs(tvb, 2)&0x0F),  //subframe
                      (tvb_get_ntohs(tvb, 0)&0x20)>>5); //crc

  info_item = proto_tree_add_string(tree, hf_alf_info, tvb, 0,
tvb_length_remaining(tvb, 0), infoString);
  info_tree = proto_item_add_subtree(info_item, ett_alf);
  proto_tree_add_item(info_tree, hf_alf_ueid, tvb, 0, 2, ENC_BIG_ENDIAN);
  proto_tree_add_item(info_tree, hf_alf_sfn, tvb, 2, 2, ENC_BIG_ENDIAN);
  proto_tree_add_item(info_tree, hf_alf_subframe, tvb, 2, 2, ENC_BIG_ENDIAN);
  proto_tree_add_item(info_tree, hf_alf_80d_crc, tvb, 0, 2, ENC_BIG_ENDIAN);
  col_add_str(pinfo->cinfo, COL_INFO, infoString);
  col_set_fence(pinfo->cinfo, COL_INFO);
}


You are receiving this mail because:
  • You are watching all bug changes.