Wireshark-bugs: [Wireshark-bugs] [Bug 13182] New: Differentiate in pcapng info if dumpcap was la
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 29 Nov 2016 13:26:13 +0000
Bug ID 13182
Summary Differentiate in pcapng info if dumpcap was launched manually or through Wireshark GUI
Product Wireshark
Version 2.2.2
Hardware x86
OS macOS 10.12
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter thomas.baudelet@gmail.com 

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
In Statistics -> Capture File Properties, Capture -> Application shows the same
string if dumpcap was launched on CLI manually, or through Wireshark's GUI.

Ex: Dumpcap (Wireshark) 2.2.1 (v2.2.1-0-ga6fbd27 from master-2.2)

It would be valuable to know how the user made the trace, for ex on link with
high utilization.

If drop counter is not available, knowing that Wireshark did dissection during
the capture can help evaluating the credibility of the trace and potential
packet loss during capture.

You are receiving this mail because:
  • You are watching all bug changes.