I am currently piping CAN traffic to wireshark via python on windows as documented in "way 3" in this article https://wiki.wireshark.org/CaptureSetup/Pipes
I would like to add comments (like one might have in a pcapng file) to certain packets programatically. Is this possible, and if so is there some direction as to how? Googling it has left me a bit confused.
The Wireshark Wiki page you point to says:
This only works with the de facto standard libpcap format version 2.4, as described in Development/LibpcapFileFormat, and with the standard pcapng format.
So all you need to do, when writing the capture file to the pipe, is write a pcapng file, with the comments in question.
There is, as far as I know, no programmatic way to do that other than to write your own code to write pcapng files, unless there's a Python library that writes pcapng files.
Thanks! I had seen some other articles possibly conflicting with that. I guess that's part of what I'm struggling with - how (given the example in the article) I would add a comment to one of these packets? Is there example I can find on how to actually compose it?
I guess that's part of what I'm struggling with - how (given the example in the article) I would add a comment to one of these packets?
See the pcapng specification for the format of pcapng files; what you'd do is write a file in that format.
No, I don't have any code to point you to as an example.
Asked: 2018-09-28 16:21:35 +0000
Seen: 258 times
Last updated: Sep 28 '18
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
