I'm not a coder, but I use Wireshark daily as I work at a networking company. I often have to go through hundreds of captures one-by-one, and right now I close each Wireshark instance and then open the next file (opening the next one in Wireshark itself is a pain because it jumps to the top of the directory each time). Perhaps it might be nice to be able to go forward and backward in a directory of capture files (like an "open" shortcut). If such a function already exists, let me know. Thanks. asked 10 Jan '12, 09:21  Fred Meissner |
One Answer:
Note sure if this helps, but did you find the "File Set -> "List Files" menu item in the "File" menu? It will give you a list of files that belong together, usually after doing a ring buffer capture, and you can jump back and forth. Doesn't help with files that do not have the naming scheme of a ring buffer capture though - at least last time I checked it didn't. answered 10 Jan '12, 13:44  Jasper ♦♦ |
Thank you very much, but that doesn't work so well since the captures must be named with the test number first, so they don't follow the same prefix.