Identifying why and how to add comments
When working with trace files, you might need to make a note on a single packet or the entire capture, for future reference.
Wireshark has options when working with comments. You can add comments to preserve the details of the entire capture or a single packet, as outlined next.
Providing file and packet comments
Within Wireshark, you can comment on the entire capture to document what you found within the file. You might preserve this information, either for yourself or to share with others when working with a team. Let's walk through an example of adding a comment using the Web Page.pcapng
subset.
To add a comment to the file, you can do one of the following:
- Select the comments icon in the lower left-hand corner, which looks like a pad and pencil.
- Go to Statistics | Capture File Properties and include your comments in the space below Capture file comments.
For example, in my Web Page.pcapng
file, I went...