Bug ID |
13182
|
Summary |
Differentiate in pcapng info if dumpcap was launched manually or through Wireshark GUI
|
Product |
Wireshark
|
Version |
2.2.2
|
Hardware |
x86
|
OS |
macOS 10.12
|
Status |
UNCONFIRMED
|
Severity |
Normal
|
Priority |
Low
|
Component |
Dissection engine (libwireshark)
|
Assignee |
[email protected]
|
Reporter |
[email protected]
|
Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
In Statistics -> Capture File Properties, Capture -> Application shows the same
string if dumpcap was launched on CLI manually, or through Wireshark's GUI.
Ex: Dumpcap (Wireshark) 2.2.1 (v2.2.1-0-ga6fbd27 from master-2.2)
It would be valuable to know how the user made the trace, for ex on link with
high utilization.
If drop counter is not available, knowing that Wireshark did dissection during
the capture can help evaluating the credibility of the trace and potential
packet loss during capture.
You are receiving this mail because:
- You are watching all bug changes.