This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Print info field only displays when Packet Details are checked

0

In WireShark, if you use the Print, Output to file, and only select Packet summary line, the Info field is blank.

If you also include Packet Details, All collapsed, the Info field is displayed but then you have to edit the text file to delete the details.

Is there a way to print just the Packet summary line with the Info field to a text file?

asked 17 Sep '14, 07:17

jds's gravatar image

jds
11112
accept rate: 0%


One Answer:

0

It works fine for me: when I print only the Packet Summaries I get just the summaries including the Info line. For example:

No.     Time            Source                Destination           Protocol Length User-Name  Info
  1 11:10:53.878966 10.226.202.118        10.226.202.53         TCP      62                1770→9000 [SYN] Seq=3871210362 Win=32767 Len=0 MSS=1260 SACK_PERM=1
  2 11:10:53.879393 10.226.202.53         10.226.202.118        TCP      60                9000→1770 [SYN, ACK] Seq=2819423808 Ack=3871210363 Win=61440 Len=0 MSS=1460
  3 11:10:53.879422 10.226.202.118        10.226.202.53         TCP      54                1770→9000 [ACK] Seq=3871210363 Ack=2819423809 Win=34020 Len=0

You may want to try upgrading to the latest release (1.12.1).

Another possibility is that the protocol dissector in question is doing something which causes it to not fill in the Info column in this situation. If that's the case even in the latest release, please file a bug report including a sample capture and the exact steps to repeat the problem.

answered 22 Oct '14, 02:21

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572
accept rate: 27%