Packet comment called monitoring alert ? Help plz asked 30 Oct '16, 19:09  Jnettspagett closed 10 Jan '17, 06:18  JeffMorriss ♦ |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
You've got to give some more information than this, we're not wizards who can magically pear at your setup and instantly know what you have. You are our eyes on this matter, so describe (in full) what you see.
Right... so that part that says 'new' you didnt think ment i dont know what more and you should be more descriptive. Im not a wizard of mind reading.
Nor are we, that's what @Jaap was trying to say :-)
A "packet comment" is normally a text field which you add by right-clicking a frame in the packet list pane and choosing the
Packet Comment...item from the context menu. If this field is not empty, it is shown as the very first "layer" in the packet dissection pane when that frame is chosen in the packet list, even before theframe"layer". I.e. it does not normally exist in any capture file until someone manually adds it there.So your question can be read in many ways - "has commenting a packet caused Wireshark to report a monitoring alert" or "how did a packet comment whose contents is 'monitoring alert' appear in my capture".
But it can also be read as "in the dissection tree, there is a line saying 'monitoring alert', what does that line mean" if you didn't know that "packet comment" has a particular meaning in the context of Wireshark.
So please use more words to describe what is your problem, including what is the contents of the frame, and best of all, upload the capture to Cloudshark or to any plain file publishing service such as Google Drive or Dropbox or... and edit your Question with a login-free link to that file and with the number of the frame in it at which we should look to see the issue.