This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Adding/appending packets comment in pcapng file

0

Hi,

I would like to add comment inside the "packet comments" field of pcapng using a script.

Use case would be something like: if dns.ttl < 120 sec: add_comments("Short TLL")

I've been reading and it's probably doable using a LUA script but before today I never wrote a line of LUA. I would like to know if it is indeed doable and if someone could send me in the right direction to get that done.

thanks

asked 22 May '13, 20:35

x0r's gravatar image

x0r
11●1●1●2
accept rate: 0%

I guess you want to highlight certain packets that way - have you thought about using coloring rules for something like this?

(23 May '13, 05:27) Jasper ♦♦