[EXT] Re: [PATCH v2 2/3] graph: pcap capture for graph nodes

[Stephen Hemminger]

On Thu, 19 Jan 2023 14:37:49 +0000
Amit Prakash Shukla <amitprakashs at marvell.com> wrote:

> > 
> > One other option is to add a new custom block type or options in pcapng.
> > Keep comment as a string, since that is what wireshark etc no how to handle.
> > Also, packet id data might be useful for graph.  
> 
> I gave a try by adding a support for custom options in libpcapng, but it seems wireshark does not support PEN in custom options as of now. 
> Wireshark was not dissecting dummy PEN that was passed in custom option.


Wireshark is not too difficult to add new types to.
I added support for RSS hash option to wireshark.

You might get good feedback on this from others.
Maybe discuss on the wireshark or pcapng mailing list.