On Thu, 19 Jan 2023 14:37:49 +0000 Amit Prakash Shukla <amitpraka...@marvell.com> wrote:
> > > > One other option is to add a new custom block type or options in pcapng. > > Keep comment as a string, since that is what wireshark etc no how to handle. > > Also, packet id data might be useful for graph. > > I gave a try by adding a support for custom options in libpcapng, but it > seems wireshark does not support PEN in custom options as of now. > Wireshark was not dissecting dummy PEN that was passed in custom option. Wireshark is not too difficult to add new types to. I added support for RSS hash option to wireshark. You might get good feedback on this from others. Maybe discuss on the wireshark or pcapng mailing list.
