Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] wireshark 1.6+: pcapng NBR blocks

From: Jose Pedro Oliveira <jpo@xxxxxxxxxxxx>
Date: Tue, 06 Dec 2011 17:24:43 +0000
Hi,

According to the Wireshark 1.6 release notes [1], tshark is able
to read and write host name information from and to pcapng, but I
can't figure out how to make tshark create NBR blocks during, or at
the end, of a capture.

A pcapng file created with tshark 1.7.1svn only seems to have
SHB, IDB, EPB and ISB blocks.

Could someone give me a hint?

tia,
jpo

[1] - https://www.wireshark.org/docs/relnotes/wireshark-1.6.0.html
-- 
José Pedro Oliveira
* mailto:jpo@xxxxxxxxxxxx *