## Summary The Expert Information dialog does not always display the Error level summary messages for "Frame length is less than captured length". ## Steps to reproduce One must use a version of Wireshark that includes commit 8674eea7b0f3d5ac83460542e49f1cd64a6707ec that introduced "frame.len_lt_caplen". 1. Open the attached pcap file (Frame_length_is_less_than_captured_length.pcap). 2. Note that "The colorized bullet" located in the bottom-left hand corner of the Statusbar is colored red indicating that "ERROR is the highest expert information level" present in the currently open pcap file. 3. Open the Expert Information dialog by clicking on "The colorized bullet" or via the main menu option Analyze -> Expert Information. 4. Note that no Error level messages are summarized in the Expert Information dialog. 5. In the main Wireshark window enter "frame" (or alternately "frame.len_lt_caplen") into the display filter field and apply. 6. Note that Expert Information dialog now shows the severity level Error message with the Summary text of "Frame length is less than captured length". 7. Clear the display filter and the Expert Information dialog no longer reports this particular Error level message. ## What is the current bug behavior? The Expert Information dialog does NOT report that the pcap file has Error level "Frame length is less than captured length" messages. ## What is the expected correct behavior? The Expert Information dialog should report that the pcap file has Error level "Frame length is less than captured length" messages. ## Sample capture file [Frame_length_is_less_than_captured_length.pcap](/uploads/aecd56bd25888d2ade7f90f63096db1d/Frame_length_is_less_than_captured_length.pcap) ## Relevant logs and/or screenshots Image that indicates the expected Error level message is NOT shown in Expert Information dialog:  Image that shows when display filter of 'frame' is applied, the expected Error level message is shown in the Expert Information dialog:  ## Build information ``` Wireshark 4.1.0rc0-145-g1940fd0d14aa (v4.1.0rc0-145-g1940fd0d14aa). Copyright 1998-2022 Gerald Combs <gerald@wireshark.org> and contributors. Licensed under the terms of the GNU General Public License (version 2 or later). This is free software; see the file named COPYING in the distribution. There is NO WARRANTY; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Compiled (64-bit) using Clang 11.0.0 (clang-1100.0.33.16), with GLib 2.68.4, with PCRE2, with zlib 1.2.11, with Qt 6.2.4, with libpcap, without POSIX capabilities, with Lua 5.2.4, with GnuTLS 3.6.15 and PKCS #11 support, with Gcrypt 1.8.7, with Kerberos (MIT), with MaxMind, with nghttp2 1.46.0, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.9.9, with libsmi 0.4.8, with QtMultimedia, with automatic updates using Sparkle, with SpeexDSP (using system library), with Minizip, with binary plugins. Running on Mac OS X 10.16, build 21G83 (Darwin 21.6.0), with Intel(R) Core(TM) i9-9880H CPU @ 2.30GHz (with SSE4.2), with 16384 MB of physical memory, with GLib 2.68.4, with PCRE2 10.39 2021-10-29, with zlib 1.2.11, with Qt 6.2.4, with libpcap 1.9.1, with c-ares 1.15.0, with GnuTLS 3.6.15, with Gcrypt 1.8.7, with nghttp2 1.46.0, with brotli 1.0.9, with LZ4 1.9.2, with Zstandard 1.4.2, with libsmi 0.4.8, with LC_TYPE=en_US.UTF-8, binary plugins supported. ```