Ability to annotate packet captures
This issue was migrated from bug 3096 in our old bug tracker.
Original bug information:
Reporter: Mark Smith
Status: RESOLVED FIXED
Product: Wireshark
Component: GTK+ UI
OS: All
Platform: All
Version: unspecified
Attachments:
opt_comment_v1.patch: read and process pcapng opt_comment in packet blocks, version 1
opt_comment_v2.patch: opt_comment read support, 2nd cleaned up version
lastPacketWithoutComment.pcapng: sample packets with comments
: screenshot of packet 1 (on gtk3)
pcap_ng_pkthdr_info.patch: Proposed way to get pcapng packet info
frame_data.patch: Add commens and interface id to frame data
packet-frame.c.patch: Add commens and interface id to the protocol tree.
pfd.patch: use frame_data's pfd instead of adding opt_comment
: A quick example image to illustrate a possible alternative for indicating comments.
edit_comments.patch: Adds the abillity to edit comments
copy_shb.patch: Make wireshak copy SHB
pcapng.patch: Read and write multiple IDB:s
pcapng.patch: Read and write multiple IDB:s II
shb-os_and_version-info_get-os-version-info.patch: version_info: new function get_os_version_info() and shb_os option string length
dsecriptions2descriptions.patch: s/_dsecriptions/_descriptions/
dumpcap_get_os_version_info_2.patch: shb_os value: get_os_version_info() instead of get_runtime_version_info() (more changes in dumpcap.c)
dumpcap_free_os_info_str.patch: dumpcap: only free os_version_str after the libpcap_write_interface_description_block() calls
pcapio-tsresol-writing-bug.patch: pcapio is writing the if_speed value in the IDB_TSRESOL option