Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Does anyone know how I can do this from the command line?

There isn't a mechanism to support that. Please file an enhancement request at the Wireshark Bugzilla. (There's a bug requesting that the --capture-comment option to tshark work when not doing a live capture, but that's a separate issue - both editcap and TShark should support --capture-comment - so please file this as a separate enhancement request.)