Wireshark - 1.0 Betriebsanweisung PDF herunterladen (Seite 149)

There are some common groups of expert infos. The following are currently implemented:

• Checksum: a checksum was invalid

• Sequence: protocol sequence suspicious, e.g. sequence wasn't continuous or a retransmission

was detected or ...

• Response Code: problem with application response code, e.g. HTTP 404 page not found

• Request Code: an application request (e.g. File Handle == x), usually Chat level

• Undecoded: dissector incomplete or data can't be decoded for other reasons

• Reassemble: problems while reassembling, e.g. not all fragments were available or an exception

happened while reassembling

• Malformed: malformed packet or dissector has a bug, dissection of this packet aborted

• Debug: debugging (should not occur in release versions)

It's possible that more such group values will be added in the future ...

7.3.1.3. Protocol

The protocol in which the expert info was caused.

7.3.1.4. Summary

Each expert info will also have a short additional text with some further explanation.

7.3.2. "Expert Info Composite" dialog

From the main menu you can open the expert info dialog, using: "Analyze/Expert Info Composite"

XXX - "Analyze/Expert Info" also exists but is subject to removal and therefore not explained here.

XXX - add explanation of the dialogs context menu.

7.3.2.1. Errors / Warnings / Notes / Chats tabs

An easy and quick way to find the most interesting infos (rather than using the Details tab), is to

have a look at the separate tabs for each severity level. As the tab label also contains the number of

existing entries, it's easy to find the tab with the most important entries.

There are usually a lot of identical expert infos only differing in the packet number. These identical

Advanced Topics

134

1 2 ... 144 145 146 147 148 149 150 151 152 153 154 ... 283 284

Keine Kommentare

Wireshark - 1.0 Betriebsanweisung Seite 149