add wireshark formula