This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

missing value: field in decode

0

I'm running multiple versions of Wireshark and noticed that the "Value:" field typically located under the "Length:" field for DHCP decodes is missing on Version 1.8.6 for Windows. Is there any way to turn this field back on?

asked 03 May '13, 10:19

onebithead's gravatar image

onebithead
1●1●1●1
accept rate: 0%

One Answer:

0

The Value item is now a hidden tree item and thus you cannot see it.

Please start Wireshark with the following option to make those hidden items visible.

wireshark -o protocols.display_hidden_proto_items:TRUE -nr dhcp.pcap

Alternatively you can set that option in the GUI:

Edit -> Preferences -> Protocols -> Display hidden protocol items

Regards
Kurt

answered 03 May '13, 11:32

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

edited 03 May '13, 11:38