Ask Your Question
0

BLF: Can Wireshark display together (within one data stream) Ethernet data frames and VBLAppText entries?

asked 2025-03-17 12:48:48 +0000

I am planning to use VBLAppText entries for storing some text debug information combined with the "regular" Ethernet data frames in BLF file. Can those information (VBLAppText and Ethernet frames) be displayed altogether within the same data stream in Wireshark? It's important for my usecase to have sorted timestamped entries altogether.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2025-03-17 14:03:40 +0000

Chuckc gravatar image

There is a sample capture attached to 19269: Report Ethernet Link Status Information in BLF Decoding that includes AppText messages.

edit flag offensive delete link more

Comments

And, when read with Wireshark 4.4.5, some of them are time-stamped and the time stamp is shown by Wireshark, so those are sorted (although note that Wireshark, by default, does not sort packets by time stamp, it sorts them by the order in which they appear in the packet, so it's best to put packets into the capture file in time stamp order; you can sort the packet by time stamp if the file isn't in that order, but some parts of Wireshark dissection may not work as desired if packets aren't in time stamp order).

Guy Harris gravatar imageGuy Harris ( 2025-03-17 18:17:28 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2025-03-17 12:48:48 +0000

Seen: 15 times

Last updated: 15 hours ago