I was reading this wireshark user guide and found that you can add comments to a pcapng capture file, but so far I haven't been able to do it, I tried everything but nothing seems to work, can someone explain me how to do it? bash $ tshark -r e.pcapng -comment hey tshark: The specified packet count "omment" isn't a decimal number This is the part of the page that shows that it is possible: capture-comment <comment> add a capture comment to the newly created output file (only for pcapng) asked 30 Apr '15, 07:45 pier |
2 Answers:
Looks like you cannot add comments to existing files. I just tried, and this is what happenend:
answered 30 Apr ‘15, 07:53 Jasper ♦♦ edited 30 Apr ‘15, 07:54 |
although not on the command line, you can do it in Wireshark
If you save the file, the comments will be added to the pcapgng file. Regards answered 30 Apr '15, 08:08 Kurt Knochner ♦ edited 30 Apr '15, 08:10 |
I tried capturing a new file but still nothing, I’m using a raspberry pi by the way with raspbian (linux) so I don’t know if I don’t have that option =P
This works on Windows with 1.12.4
yeah, I just checked the man page and it seems that that option is not available for linux distributions, at least not mine =P
You’ll need a more up to date version. If .deb based you can try the wireshark-dev ppa.