I'm currently using editcap to add per-frame comments in my pcapng files (editcap -a frame:comment), but I also need to add per-file comments. Does anyone know how I can do this from the command line? Note: I am aware that wireshark can do this from the GUI.
Does anyone know how I can do this from the command line?
There isn't a mechanism to support that. Please file an enhancement request at the Wireshark Bugzilla. (There's a bug requesting that the --capture-comment option to tshark work when not doing a live capture, but that's a separate issue - both editcap and TShark should support --capture-comment - so please file this as a separate enhancement request.)
Done (https://bugs.wireshark.org/bugzilla/s...). Thank you, Guy.
Asked: 2018-08-03 22:08:42 +0000
Seen: 555 times
Last updated: Aug 04 '18
