This is our old Q&A Site. Please post any new questions and answers at

Does Wireshark have a way to enter a comment on a specific packet for future reference? (e.g. Here is the start of the issue.)

asked 05 May '11, 08:17

CarlT's gravatar image

accept rate: 0%

edited 05 May '11, 08:39

cmaynard's gravatar image

cmaynard ♦♦

The pcapng file format supports this, but Wireshark itself does not yet have good support for it. A bug has been filed for it though, namely bug 3096.

permanent link

answered 05 May '11, 08:43

cmaynard's gravatar image

cmaynard ♦♦
accept rate: 20%

Awesome, glad it's already in the bug list. Thanks for the update and reference.

(05 May '11, 08:47) CarlT

A similar bug 6229 has been fixed on wireshark 1.6.2 release related to reading and displaying comment option in wire shark.

I tried but not able to view the comment field from pcapng file using wireshark 1.6.3 release. Any idea ??

(06 Jan '12, 01:35) ambika

Bug 6229 is NOT a similar bug; that bug is not that the comment can't be read, it's that Wireshark mishandled the comment in a way that meant that it didn't properly return the packet data for a frame with comments, meaning Wireshark wouldn't even properly show the packet data.

The only way you're going to be able to view the comment field is to wait for bug 3096 to be fixed and then use a version of Wireshark with that fix.

(06 Jan '12, 02:13) Guy Harris ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 05 May '11, 08:17

question was seen: 5,599 times

last updated: 06 Jan '12, 02:13

p​o​w​e​r​e​d by O​S​Q​A