Wireshark · Wireshark-users: Re: [Wireshark-users] embed comments and notes into trace?

["Alan Jay Weiner" <a.weiner@xxxxxxxxxx>]

Thanks, Gerald,
That may be useful for post-processing notes.

For during capture, there are setups where I want to log messages from
several computers other than the one running Wireshark.

- Al -


 
----------------------------------------------------------------------------
Alan Jay Weiner / Valid8.com, Inc. - Conform, Perform & Excel(tm)
500 W Cummings Park, Suite #2700, Woburn, MA 01801, USA
a.weiner@xxxxxxxxxx / Tel:+1-781-938-1221 x112, Fax +1-781-207-0550
http://www.VALID8.com 
 
-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Gerald Combs
Sent: Wednesday, November 19, 2008 12:03 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] embed comments and notes into trace?

Alan Jay Weiner wrote:
> Does anyone know of a protocol I can use in this way?  It seems to me I
> remember something like this, but I'll be darned if I can find it now.  I
> can mis-use something - send a DNS query to "starting doing
> something-or-other" but the info line will have other cruft on it
("standard
> query A starting doing something-or-other").

Instead of using a dummy protocol, you might want to use a file format that
lets
you add comments directly to packets, such as pcap-ng:

http://www.winpcap.org/ntar/draft/PCAP-DumpFileFormat.html
http://wiki.wireshark.org/Development/PcapNg

Experimental support is currently in Wireshark, in wiretap/pcapng.[ch].
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-users