8.2. The “Capture File Properties” Dialog

General information about the current capture file.

Figure 8.1. The “Capture File Properties” dialog

ws capture file properties

This dialog shows the following information:

Details

Notable information about the capture file.

File
General information about the capture file, including its full path, size, cryptographic hashes, file format, and encapsulation.
Time
The timestamps of the first and the last packet in the file along with their difference.
Capture
Information about the capture environment. This will only be shown for live captures or if this information is present in a saved capture file. The pcapng format supports this, while pcap doesn’t.
Interfaces
Information about the capture interface or interfaces.
Statistics
A statistical summary of the capture file. If a display filter is set, you will see values in the Captured column, and if any packets are marked, you will see values in the Marked column. The values in the Captured column will remain the same as before, while the values in the Displayed column will reflect the values corresponding to the packets shown in the display. The values in the Marked column will reflect the values corresponding to the marked packages.
Capture file comments
Some capture file formats (notably pcapng) allow a text comment for the entire file. You can view and edit this comment here.
Refresh
Updates the information in the dialog.
Save Comments
Saves the contents of the “Capture file comments” text entry.
Close
Closes the dialog
Copy To Clipboard
Copies the “Details” information to the clipboard.
Help
Opens this section of the User’s Guide.