I have used Ethereal and Wireshark for many years and have hundreds of traces. I would like the ability to enter text notes attached to the trace to allow me to keep a record of the problem scenario and where in the trace the problem is recorded plus my diagnosis of the trace etc. I am unaware if this facility already exists but I for one would find it very useful. asked 13 Dec '10, 13:14  farmerk |
One Answer:
This is a feature that is wanted by more people. The current default file format does not support this. However the pcap-ng file format does make this possible, it only needs to be implemented. This is on the wireshark pcap-ng wishlist awaiting someone to write the code ;-) answered 14 Dec '10, 01:25  SYN-bit ♦♦ so get busy, ya slacker! ;) (14 Dec '10, 18:57) hansangb I just thought it would be the best "first development project" for you actually... I'll be your mentor ;-) (14 Dec '10, 23:05) SYN-bit ♦♦ If I have to break out my Kernighan and Ritchie, god help us all! That'll be the start of the downfall of Wireshark! :) I'll leave that up to the professionals, how about that? (15 Dec '10, 15:31) hansangb |
Yup, this was discussed during one of the sessions in Sharkfest. the other thing I would love to see is tabbed filtered traces (so if you filter on something, it'll be a tabbed window). With the option of preserving original frame numbers.