_ws.expert columns not populated for IPv4
Summary
Columns for _ws.expert
, _ws.expert.severity
, _ws.expert.group
, _ws.expert.message
not populated for ip errors.
_ws.expert
display filter returns no results.
Steps to reproduce
Screen shots for Sample Capture RIPv1
Column data filled in after coloring rules (Colorize) enabled:
Column data populated after adding column for ip.id
:
Frame with multiple Expert Infos but not all occurrences displayed (ipv4 data not in columns) (see below for capture info):
What is the current bug behavior?
(What actually happens)
What is the expected correct behavior?
Large capture of many protocols with many Expert Infos - The Ultimate PCAP
_ws.expert
display filter matches many errors/protocols.
Columns for ws.expert
fields are populated without enabling colors or adding extra ip
field columns.
Frames with multiple Expert Info messages display all occurrences.
Sample capture file
(If possible attach a sample capture file, not screenshot of dissection, showing this issue)
Relevant logs and/or screenshots
(Paste any relevant logs here)
(Paste any relevant screenshots here)
Build information
3.4.3 (v3.4.3-0-g6ae6cd335aa9)
Compiled (64-bit) with Qt 5.15.1, with libpcap, with GLib 2.52.3, with zlib
1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4, with GnuTLS 3.6.3
and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos, with MaxMind DB
resolver, with nghttp2 1.39.2, with brotli, with LZ4, with Zstandard, with
Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic updates using
WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled resampler), with
Minizip.
Running on 64-bit Windows 10 (2004), build 19041, with Intel(R) Core(TM)
i5-4300U CPU @ 1.90GHz (with SSE4.2), with 12191 MB of physical memory, with
locale English_United States.utf8, with light display mode, without HiDPI, with
Npcap version 1.10, based on libpcap version 1.9.1, with GnuTLS 3.6.3, with
Gcrypt 1.8.3, with brotli 1.0.2, without AirPcap, binary plugins supported (21
loaded).
Built using Microsoft Visual Studio 2019 (VC++ 14.28, build 29336).