summaryrefslogtreecommitdiff
path: root/doc/editcap.pod
AgeCommit message (Collapse)AuthorFilesLines
2001-12-05The Visual Networks tool that generates capture files that we now canGuy Harris1-1/+1
read is Visual UpTime. svn path=/trunk/; revision=4339
2001-12-05Note that Ethereal's and Tethereal's native capture file format isGuy Harris1-15/+17
libpcap format, and say that it's also used by "other tools" (tcpdump and Ethereal/Tethereal aren't the only tools that write captures in that format). Weaken the claim that we read Etherpeek files to say only that we read Etherpeek versions 5, 6, and 7 for Macintosh, so people don't conclude that we read Etherpeek-for-Windows captures (we don't). svn path=/trunk/; revision=4337
2001-12-04Update the manual pages to reflect the addition of support for readingGuy Harris1-9/+10
and writing Visual Networks traffic capture files. svn path=/trunk/; revision=4329
2001-10-19DBS Etherwatch wiretap module, from Marc Milgram.Guy Harris1-6/+7
svn path=/trunk/; revision=4042
2001-10-18VMS TCPIPtrace wiretap module, from Marc Milgram.Guy Harris1-8/+11
Update the lists of known capture file formats in the Tethereal, editcap, and mergecap man pages to match the current list (as found in the Ethereal man page). svn path=/trunk/; revision=4039
2001-07-12Mergecap utility for merging capture files, from Scott Renfro.Guy Harris1-1/+1
svn path=/trunk/; revision=3701
2001-07-12"-t" flag for editcap, to adjust timestamps in frames, from ScottGuy Harris1-0/+14
Renfro. svn path=/trunk/; revision=3696
2001-07-05Don't capitalize the names of programs in the summary lines of man pagesGuy Harris1-1/+1
- at least some versions of makewhatis (e.g., the Solaris version) uses that name in a case-sensitive fashion, so you can't do "man ethereal", say, you have to do "man Ethereal", and that doesn't work as the man page file is "ethereal.1", not "Ethereal.1". svn path=/trunk/; revision=3656
2000-11-07Change zing.org addresses to ethereal.com.Gerald Combs1-1/+1
svn path=/trunk/; revision=2578
2000-08-09Document that ranges of packet numbers can be specified.Guy Harris1-1/+4
svn path=/trunk/; revision=2234
2000-07-26In the final scene of the horror movie, just when you think the monsterGuy Harris1-3/+4
is finally dead, and you're walking away, it springs up again and attacks. It appears that the ss990915 version of Alexey Kuznetzov's libpcap patch has some extra stuff in the per-packet header for some sort of SMP debugging, and that SuSE Linux 6.3 picked it up. Thus, even if a libpcap file has the modified magic number, we *still* have to go through the usual heuristic hell to figure out what type of file it is. svn path=/trunk/; revision=2164
2000-05-25Support for reading compressed Sniffer files, from Tim Farley, JoergGuy Harris1-5/+5
Mayer, and yours truly. svn path=/trunk/; revision=2002
2000-04-27Add a "-s" flag to editcap, to make it truncate packets to a specifiedGuy Harris1-9/+25
snapshot length before writing them to the output file; this may come in handy if you are translating the file to a different format so that it can be read by a program that can't handle packets above a certain size (e.g., the snoop in Solaris 2.5.1 or 2.6, which reject Ethernet packets larger than the Ethernet MTU, and thus can't handle gigabit Ethernet captures using jumbo frames). svn path=/trunk/; revision=1891
2000-03-07Note that the "-T" flag doesn't cause "editcap" to translate link-layerGuy Harris1-1/+7
headers, it just causes it to force the encapsulation type of the output file to the specified type. svn path=/trunk/; revision=1702
2000-01-09Add a man page for "editcap".Guy Harris1-0/+97
svn path=/trunk/; revision=1446