Wireshark mailing list archives

Re: PCAP-NG metadata support


From: Stephen Donnelly <Stephen.Donnelly () endace com>
Date: Mon, 23 Jul 2012 21:24:41 +0000

-----Original Message-----
From: wireshark-dev-bounces () wireshark org [mailto:wireshark-dev-bounces () wireshark org] On Behalf Of Carpenter, 
Brandon J
Sent: Saturday, 21 July 2012 5:16 a.m.
To: wireshark-dev () wireshark org
Subject: [Wireshark-dev] PCAP-NG metadata support

Hi all,

I've been working on a patch to overcome one of Wireshark's limitations with regard to PCAP-NG captures.  The patch 
adds metadata (section, interface, packet options, etc) to the dissector window and allows one to filter packets based 
on the metadata


It's also notable that the useful 'capinfos' CLI tool does not decode/display any Pcap-NG SHB/IDB metadata.

Stephen

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: