Annotating Packets

CloudShark allows you to add annotations to individual packets once a capture is opened. Clicking the icon in the first column will open an annotation editor where you can add or edit notes about that packet.

Annotations help provide information about specific packets or explain the steps in analyzing a capture file. These notes appear in a popup when hovering over the annotation icon, or displayed as a column in the packet list if the comment column is resized. Packets can be sorted by the annotations column to bring all of the annotated packets to the top of the packet list.

The more info link next to the name of the capture opens the file info dialog box, and the Comments & Annotations tab will display which packets have annotations, the user that created the annotation, and the text of the annotation. User comments can also be added to the capture file from this tab.