I'm writing an application that analyzes network traffic. This app launches Wireshark GUI with the captured data and filters. Now, I want to jump to certain packets, change filters, what ever.., or control that already running instance of Wireshark. Is that possible? And if, how can it be done in general? Some details: It could be that this Question had the same intent but if so, it seems misunderstood. asked 14 Jan '16, 09:26  DuStellstFragen edited 14 Jan '16, 09:28 |
One Answer:
There is a command line parameter "-g" to open Wireshark and have it jump to a specific packet. E.g. opens the file "test.pcapng" and jumps to packet 111. Other than that, check this question: https://ask.wireshark.org/questions/47107/go-to-packet-via-an-api answered 14 Jan '16, 09:31  Jasper ♦♦ |
Thank you Jasper for your reply. I don't want to launch another instance of Wireshark. But the last answer by Kurt Knochner in the thread you mentioned seems interesting. Thanks!