About Crumbs

Crumbs is an extension for vscode that allows you to inspect packet traces without ever leaving your editor. The goal for Crumbs is to be able to open pcaps with Wiresharks dissection from within vscode and to prevent you from ending up with dozen of Wireshark windows and wasting time trying to find the correct one. Live capturing and any kind of editing pcaps is out of scope (at least for now).

Getting Started

To provide Wiresharks dissection and amazing file compatibility, sharkd has to be installed.

 # Fedora
 sudo dnf install wireshark-cli

 # Ubuntu
 sudo apt install wireshark-common

 # MacOS
 brew install wireshark

After that you should be good to go!
If not, please make sure that the correct path is used in the extensions sharkd setting.

Opening Trace Files

Crumbs is already set as the default editor for a lot of file extensions. If your tracefile does not open the Frame List by default please check if the correct editor is selected and if your file type is actually supported by Wireshark.

Windows

Currently there is no way to run this extension directly under Windows. But it is possible to use Crumbs via WSL!