Wireshark-bugs: [Wireshark-bugs] [Bug 8511] allow editcap to ignore certain bytes during duplica

Date: Tue, 17 Dec 2013 14:01:23 +0000

changed bug 8511

What Removed Added
CC   [email protected]

Comment # 3 on bug 8511 from
Similarly, editcap should ignore the sll.pkttype for duplicate detection.

I'm sniffing on two hosts; when I try to merge the two capture files, the
duplicate detection won't work because one of the files has "Unicast to us (0)"
and the other "Sent by us (4)".

So _all_ packets are kept duplicated.


[[
   The nicest thing would be to "merge" them by having two timestamps
   (one for each host), and to be able to print the time difference
   of these two. (Although that gives problems related to
   time synchronization, etc.)
]]


You are receiving this mail because:
  • You are watching all bug changes.