How do I force packet coloring rules?

Question

I'm working on the FAST protocol dissector for wireshark, and I want to make it so that packets containing errors are colored red for the users. I know how to do it by modifying my coloring rules filter, but is there a way to force this change on any user using my plugin (so that they don't have to manually alter the coloring rules)?

Answer 1

Add expert items to the errors. That makes them show up in the expert dialog and color coded in the packet list / details.

Answer 2

I'm trying to implement this, and I'm making a simple function call like this:

  expert_add_info_format(pinfo, 
                    NULL,
                    PI_PROTOCOL,
                    PI_ERROR,
                    "ERROR 123");

However, the behavior is not what I would expect. The packet color does not change, and in the Expert Info column, all I see is: ?8388608?

Also, when I go to Analyze->Expert Info, wireshark dies, and I get this error in the terminal:

**
ERROR:expert_dlg.c:142:expert_dlg_packet: code should not be reached
Aborted