Ethereal-users: Re: [Ethereal-users] easiest way to remove a time slot from a libpcap file?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: LEGO <luis.ontanon@xxxxxxxxx>
Date: Fri, 17 Mar 2006 03:38:24 +0100
editcap -B <start> in.cap outA.cap
editcap -A <end> in.cap outB.cap
mergecap outA.cap outB.cap


On 3/17/06, George P Nychis <gnychis@xxxxxxx> wrote:
> Hi,
>
> Whats the easiest way to remove a time slot from a file?  I thought that editcap would do it because it has the -r argument so as to not remove the packet from the file.  However if I do something like:
> editcap -A ... -B ... infile outfile
>
> the packets between A and B still remain in the original file, even without the -r argument
>
> i don't know if this is a bug?
>
> If not, is there any easy way to remove a time slot?
>
> Thanks!
> George
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>



--
oggi banane domani mortadella