Section 3.5.1 of the PCAP Next Generation (pcapng) Capture File Format internet draft describes the possibility to add custom options in pcapng blocks. With this, it could be possible to add extra information to captured packets. Are there plans to support these in Wireshark? E.g.: - the possibility to register custom dissectors (plugin) to decode these options. - the possibility to add custom options with editcap e.g. asked 09 Sep '16, 03:13 Bruno Verstuyft |