Re: What severity should be shown for multiple expert infos in a packet ?

[Guy Harris <guy () alum mit edu>]

On Sep 17, 2012, at 6:04 PM, Michael Lum <michael.lum () starsolutions com> wrote:

> I searched and couldn't find anything on multiple expert infos.
>  
> What severity level is supposed to be shown in the 'expert' column
> when there is more than one expert info in a packet?

Probably the highest severity.

> For example in one packet I have:
>  
> there was a UDP ERROR severity expert info for a bogus payload length
>  
> there was also a WARN severity expert info for a protocol dissected in
> the UDP payload.
>  
> The 'expert' column displayed WARN.
>  
> It seems like a bug.

Yes, it does; go ahead and file one on the bugzilla for this.

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe