Wireshark-dev: Re: [Wireshark-dev] How to find duplicate packets with time interval less than 2

From: Petr Janata <janata@xxxxxx>
Date: Fri, 28 Nov 2008 04:13:54 +0100
Stephen Fisher napsal(a):
On Thu, Nov 27, 2008 at 11:43:58PM +0100, Petr Janata wrote:

I am traiyng to modify editcap, because there is parameter '-d' for skipping duplicate packets. I am going to filter those packets witche have time interval less then 2ms. Do you have any idea?

According to editcap's man page, "the length and MD5 sum of the MD5 sum of the current packet are compared to the previous four packets." Do you want to change this to 2ms instead?


Steve

_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-dev
If I compare MD5 checksum I can find duplicate packets. I 'd like to add new parameter '-di' into the editcap. The algorithm skip only pakets that are duplicated and also the time interval betwean them is less than 2ms.

Petr