Wireshark-dev: Re: [Wireshark-dev] How to find duplicate packets with time interval less than 2

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Thu, 27 Nov 2008 03:55:37 -0700
On Thu, Nov 27, 2008 at 11:43:58PM +0100, Petr Janata wrote:

> I am traiyng to modify editcap, because there is parameter '-d' for 
> skipping duplicate packets. I am going to filter those packets witche 
> have time interval less then 2ms. Do you have any idea?

According to editcap's man page, "the length and MD5 sum of the MD5 sum 
of the current packet are compared to the previous four packets."  Do 
you want to change this to 2ms instead?


Steve