Wireshark-users: Re: [Wireshark-users] Commenting on packets

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sun, 11 Sep 2011 21:21:36 -0700
On Sep 11, 2011, at 6:10 PM, Ryan Izzy Bales wrote:

> Is there any way to attach a comment to a particular packet, or set of packets?

Unfortunately, currently there isn't.  The pcap file format has no mechanism that can be used to support it, but pcap-ng has that support; Wireshark currently includes no code that allows you to add comments, however.