Wireshark-dev: [Wireshark-dev] Re: Diameter 3xxx Answers, Error bit not set

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Thu, 11 Sep 2025 18:26:45 +0200
Hi,

Expert items show up where the dissector developer has put in the logic to add them. If in this case the logic is not build into the dissector, so they won’t show up.
Since you seem to understand what the logic is supposed to be maybe you can enhance the dissector code for this? Or file an enhancement issue on out GitLab with a capture file showing the situation.

Thanks,
Jaap


> On 11 Sep 2025, at 17:29, Cristian Constantin via Wireshark-dev <wireshark-dev@xxxxxxxxxxxxx> wrote:
> 
> Hi,
> 
> Wireshark does not show any "Expert Information" errors, warnings, aso
> for this kind of messages even though both RFC3588 and RFC6733 require
> explicit setting of this bit for answers with Result-Code in the 3xxx
> range...
> 
> Are the "Expert Information" errors, warnings aso configurable per protocol?
> 
> I am running Wireshark on ubuntu 22.04:
> 
> Version 4.4.8.
> 
> Compiled (64-bit) using GCC 11.4.0, with GLib 2.72.4, with Qt 5.15.3, with
> libpcap, with POSIX capabilities (Linux), with libnl 3, with zlib 1.2.11,
> without zlib-ng, with PCRE2, with Lua 5.4.4, with GnuTLS 3.7.3 and PKCS #11
> support, with Gcrypt 1.9.4, with Kerberos (MIT), with MaxMind, with nghttp2
> 1.43.0, with nghttp3 0.1.1, with brotli, with LZ4, with Zstandard, with Snappy,
> with libxml2 2.9.13, with libsmi 0.4.8, with Minizip 1.2.8, with QtMultimedia,
> with QtDBus, without automatic updates, with binary plugins.
> 
> Running on Linux 6.8.0-78-generic, with 12th Gen Intel(R) Core(TM) i7-1270P
> (with SSE4.2), with 31761 MB of physical memory, with GLib 2.72.4, with Qt
> 5.15.3, with libpcap 1.10.1 (with TPACKET_V3), with zlib 1.2.11, with PCRE2
> 10.39 2021-10-29, with c-ares 1.18.1, with GnuTLS 3.7.3, with Gcrypt 1.9.4, with
> nghttp2 1.43.0, with nghttp3 0.1.1, with brotli 1.0.9, with LZ4 1.9.3, with
> Zstandard 1.4.8, with libsmi 0.4.8, with light display mode, without HiDPI, with
> Wayland, with QPA plugin "xcb", with LC_TYPE=en_US.UTF-8, binary plugins
> supported.
> 
> Thanks,
> Cristian
> _______________________________________________
> Wireshark-dev mailing list -- wireshark-dev@xxxxxxxxxxxxx
> To unsubscribe send an email to wireshark-dev-leave@xxxxxxxxxxxxx