Wireshark-dev: Re: [Wireshark-dev] PCAP-NG metadata support
From: Stephen Donnelly <[email protected]>
Date: Mon, 23 Jul 2012 21:24:41 +0000
-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Carpenter, Brandon J
Sent: Saturday, 21 July 2012 5:16 a.m.
To: [email protected]
Subject: [Wireshark-dev] PCAP-NG metadata support

Hi all,

I've been working on a patch to overcome one of Wireshark's limitations with regard to PCAP-NG captures.  The patch adds metadata (section, interface, packet options, etc) to the dissector window and allows one to filter packets based on the metadata


It's also notable that the useful 'capinfos' CLI tool does not decode/display any Pcap-NG SHB/IDB metadata.

Stephen