Ask Your Question

editcap and per-file comments in pcapng files...

asked 2018-08-03 22:08:42 +0000

barcaroller gravatar image

I'm currently using editcap to add per-frame comments in my pcapng files (editcap -a frame:comment), but I also need to add per-file comments. Does anyone know how I can do this from the command line? Note: I am aware that wireshark can do this from the GUI.

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted

answered 2018-08-04 01:38:09 +0000

Guy Harris gravatar image

Does anyone know how I can do this from the command line?

There isn't a mechanism to support that. Please file an enhancement request at the Wireshark Bugzilla. (There's a bug requesting that the --capture-comment option to tshark work when not doing a live capture, but that's a separate issue - both editcap and TShark should support --capture-comment - so please file this as a separate enhancement request.)

edit flag offensive delete link more


barcaroller gravatar imagebarcaroller ( 2018-08-04 15:30:47 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2018-08-03 22:08:42 +0000

Seen: 430 times

Last updated: Aug 04 '18