Ethereal-users: Re: [Ethereal-users] Tethereal filtering - file to file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 21 Nov 2001 10:52:01 -0800 (PST)
> Depends on what you want to do. If you can filter on it with a 
> pcap-style filter, you can use a capture filter ('-f' or command line 
> arguments),

No, he can't; capture filters only work when capturing, not when reading
an existing capture file.

> > - The "-c" option works, but can I do something like "the last 100 
> > packets of the file" ?
> 
> Editcap can do that.

Yes, but not unless you know how many packets the file has.