Bill Meier wrote:
Would it make any sense to be able to store "application specific"
information in a pcapng file ?
E.g., selected Wireshark prefs so that Wireshark can act on same ?
This would be useful when a capture file reqires specific dissector
preferences to properly dissect the file.
Would this fit (at all) within the design goals for pcapng ?
Is there be a way to do this reasonably cleanly with the existing format ?
How might one indicate the prefs which should to be stored ?
First thought: Keep a list of protocols in the capture file. For each,
store only the preferences (if any) for that protocol which don't have
the default value.