What is the function of the Expert Info window in Wireshark?

• A. It shows raw packet bytes in hexadecimal
• B. It filters traffic by protocol
• C. It aggregates protocol dissector notices, warnings, and errors to highlight issues in the capture
• D. It stores capture metadata for later export

Answer: (C)

Expert Info in Wireshark collects protocol dissector notices, warnings, and errors to highlight issues in the capture. As packets are analyzed, dissectors may encounter unusual or problematic conditions—such as unexpected lengths, malformed fields, or reassembly problems—and these get surfaced here as expert items. The window brings together these notices from across the entire capture and presents them with severity levels (note, warning, error), so you can quickly spot where something might be going wrong. This is a diagnostic aid that helps you jump to the relevant frames and inspect what happened, rather than just showing raw data or filtering traffic. It’s separate from viewing raw packet bytes, filtering by protocol, or storing capture metadata, which are handled by other parts of the tool.