summaryrefslogtreecommitdiff
path: root/doc/editcap.pod
AgeCommit message (Collapse)AuthorFilesLines
2012-11-08editcap does not support the -H and -W options, remove the description ofJeff Morriss1-26/+0
those options (which had been cut-n-paste from the tshark man page). For editcap to support these options it would either need to be linked against libwireshark or the address resolution stuff would need to be moved from libwireshark to, for example, libwsutil. svn path=/trunk/; revision=45975
2012-03-15Sort the options. Delete all the line-terminating "g's" added in 40820.Chris Maynard1-108/+108
svn path=/trunk/; revision=41563
2012-02-03The libpcap puts pcap-filter into the misc section (which seems to be 7).Jörg Mayer1-44/+44
Refer to pcap-filter and mention tcpdump only as a fallback. svn path=/trunk/; revision=40820
2011-03-24Add initial pcapng name resolution record support. Wireshark has readGerald Combs1-0/+26
support; TShark has read+write support. Additionally TShark can read a "hosts" file and write those records to a capture file. This uses "struct addrinfo" in many places and probably won't compile on some platforms. svn path=/trunk/; revision=36318
2011-02-04From Jason Masker (bug 5240):Sake Blok1-4/+6
` Allow editcap to chop from beginning of packet for decapsulation svn path=/trunk/; revision=35832
2010-11-16Make editcap -B work like expected: output no packets after the stop time.Sake Blok1-1/+1
Old behavior was to include a packet with a timestamp of 12:00:00.934 if -B "YYYY-MM-DD 12:00:00" was used. svn path=/trunk/; revision=34913
2010-11-09Fixed typos.Chris Maynard1-3/+3
svn path=/trunk/; revision=34816
2010-06-02From Jim Young via bug 4331:Gerald Combs1-0/+42
This patch adds a new '-S' option to editcap that will rewrite timestamps of packets to insure that the new capture file is in strict chronological order. This option's primary use case is to fixup the occasional timestamps that have a negative delta time relative to previous packet. This feature is related to (but does not depend on) capinfos enhancement submitted in bug #4315 which helps identify tracefiles with "out-of-order" packets. svn path=/trunk/; revision=33042
2009-05-12SYNOPSYS --> SYNOPSISBill Meier1-1/+1
svn path=/trunk/; revision=28338
2009-05-12Update man pages; Add several missing options; Fix typos, Do minor rewording; Bill Meier1-8/+14
editcap: Add description of -i option; dumpcap: Add description of -S option; svn path=/trunk/; revision=28336
2009-05-02From Reinhard Speyerer:Jaap Keuter1-2/+2
This patch fixes several misspellings/typos in Wireshark documentation. svn path=/trunk/; revision=28240
2009-04-17From Jim Young <jyoung@gsu.edu>:Balint Reczey1-15/+99
- New duplicate packet removal options for editcap https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3168 I changed the patch a bit: - Adapted to 80 chars wide screen - Merged -w and -W parameters svn path=/trunk/; revision=28074
2006-08-10Add some programs to 'see also'Jörg Mayer1-1/+2
svn path=/trunk/; revision=18867
2006-07-27Add duplicate frame detection (and removal) to editcap. (Some switchesGerald Combs1-0/+7
generate duplicate packets when a mirror/SPAN port is misconfigured). svn path=/trunk/; revision=18800
2006-07-13Add a note how to change headers (od+text2pcap)Jörg Mayer1-2/+3
svn path=/trunk/; revision=18725
2006-07-10Remove the numeric component in man page links.Gerald Combs1-1/+1
svn path=/trunk/; revision=18698
2006-07-09Use L<> on all links.Guy Harris1-7/+8
Don't use anything on man page references - pod2man handles that. Don't refer to "the capture file format section" of the Wireshark man page, as there's no section explicitly labelled as such; just refer to the beginning of the DESCRIPTION section. svn path=/trunk/; revision=18694
2006-05-31Rename the main executable to "wireshark", along with more conversions:Gerald Combs1-7/+7
ethereal.com -> wireshark.org mailing lists and addresses ETHEREAL -> WIRESHARK Man pages Automake/Autoconf names svn path=/trunk/; revision=18271
2006-05-22ethereal->wiresharkRonnie Sahlberg1-1/+1
svn path=/trunk/; revision=18207
2006-03-13Add -A <start time> and -B <stop time> options to editcapLuis Ontanon1-0/+12
svn path=/trunk/; revision=17614
2006-01-11instead of repeating the capture file format description over and over again ↵Ulf Lamping1-108/+24
(this list also tends to become outdated), just give a small description and refer to the Ethereal man page svn path=/trunk/; revision=16997
2006-01-10added <>: [-c packets per file] -> [-c <packets per file>]Ulf Lamping1-20/+23
update to my latest command line changes svn path=/trunk/; revision=16992
2006-01-09complete redesign of this manpageUlf Lamping1-153/+164
svn path=/trunk/; revision=16982
2005-12-22Jaap Keuter:Jörg Mayer1-0/+10
Add the documentation part of the fix for bug 379 svn path=/trunk/; revision=16876
2005-10-27simply use 4 spaces for example indentation and formattingUlf Lamping1-31/+7
svn path=/trunk/; revision=16330
2005-10-27Synopsis: don't prepend an optional - before the first record number, it ↵Ulf Lamping1-1/+1
won't work svn path=/trunk/; revision=16328
2005-10-26from Jaap Keuter:Ulf Lamping1-1/+63
The attached patch extends the synopsys and adds an 'Examples' chapter to the editcap documentation. I've edited this a bit, without the real knowledge :-(, to make it: a. look better b. make more sense (at least to me) svn path=/trunk/; revision=16325
2005-10-06add missing -E parameter to the Options sectionUlf Lamping1-0/+4
svn path=/trunk/; revision=16138
2005-04-10Add an option to Editcap that adds various types of errors to the capture Gerald Combs1-3/+10
file. svn path=/trunk/; revision=14046
2004-04-25build a list of the input file formats instead of a floating text,Ulf Lamping1-20/+87
added program names to HTML titles, various minor fixes svn path=/trunk/; revision=10686
2004-02-11Include EyeSDN USB S0 trace files in the list of file formats we read.Guy Harris1-6/+6
svn path=/trunk/; revision=10040
2003-12-18WildPackets' EtherHelp appears to write EtherPeek-compatible files,Guy Harris1-6/+7
except that the 0x80 bit is turned on in the file version number field. Turn that bit off before processing that field. svn path=/trunk/; revision=9342
2003-10-31Fix some warnings from pod2man.Guy Harris1-1/+1
svn path=/trunk/; revision=8843
2003-10-31From Scott Emberley: support for reading Network Instruments version 9Guy Harris1-17/+20
capture files. svn path=/trunk/; revision=8840
2003-07-29From Thierry Martin: support for reading files from Accellent 5Views LANGuy Harris1-7/+8
agents. svn path=/trunk/; revision=8093
2003-05-20Lump TCPIPtrace and UCX$TRACE together and add TCPtrace to the mix.Guy Harris1-8/+9
svn path=/trunk/; revision=7700
2003-05-19From Martin Warnes: support for VMS UCX$TRACE output in wiretap.Guy Harris1-8/+8
svn path=/trunk/; revision=7692
2003-03-10Fix some perldoc warnings and obscure email addresses.Gerald Combs1-2/+4
svn path=/trunk/; revision=7333
2002-07-31From Motonori Shindo: support for reading CoSine L2 debug output.Guy Harris1-7/+7
svn path=/trunk/; revision=5922
2002-03-26From Andrew Feren:Guy Harris1-1/+1
Man pages don't have any notion of external links and there isn't enough information for pod2html to resolve the links for manpages in the "See Also" section of the man pages. As a result running pod2html generates a bunch of warning messages and just emphasizes/italicizes the text. Therefore, we change the link (L<name>) command to an emphasizes (I<name>) command. The net result is the same, but you don't get the warnings when generating HTML docs. At some point in the future someone might want to do the work to get the links to generate correctly, but until then this will shut up pod2html. svn path=/trunk/; revision=5021
2002-01-29Untested support for AiroPeek captures.Guy Harris1-12/+13
svn path=/trunk/; revision=4619
2002-01-22Fix up various product names and descriptions in the lists of fileGuy Harris1-15/+16
formats we can read; include vendor names. We should be able to read TokenPeek captures, as well as captures from the Windows versions of EtherPeek. Don't list the version numbers for EtherPeek and TokenPeek - those are file format version numbers, not program version numbers. svn path=/trunk/; revision=4599
2002-01-18It's EtherPeek, not Etherpeek, as WildPackets' Web site indicates.Guy Harris1-1/+1
svn path=/trunk/; revision=4562
2001-12-05The Visual Networks tool that generates capture files that we now canGuy Harris1-1/+1
read is Visual UpTime. svn path=/trunk/; revision=4339
2001-12-05Note that Ethereal's and Tethereal's native capture file format isGuy Harris1-15/+17
libpcap format, and say that it's also used by "other tools" (tcpdump and Ethereal/Tethereal aren't the only tools that write captures in that format). Weaken the claim that we read Etherpeek files to say only that we read Etherpeek versions 5, 6, and 7 for Macintosh, so people don't conclude that we read Etherpeek-for-Windows captures (we don't). svn path=/trunk/; revision=4337
2001-12-04Update the manual pages to reflect the addition of support for readingGuy Harris1-9/+10
and writing Visual Networks traffic capture files. svn path=/trunk/; revision=4329
2001-10-19DBS Etherwatch wiretap module, from Marc Milgram.Guy Harris1-6/+7
svn path=/trunk/; revision=4042
2001-10-18VMS TCPIPtrace wiretap module, from Marc Milgram.Guy Harris1-8/+11
Update the lists of known capture file formats in the Tethereal, editcap, and mergecap man pages to match the current list (as found in the Ethereal man page). svn path=/trunk/; revision=4039
2001-07-12Mergecap utility for merging capture files, from Scott Renfro.Guy Harris1-1/+1
svn path=/trunk/; revision=3701
2001-07-12"-t" flag for editcap, to adjust timestamps in frames, from ScottGuy Harris1-0/+14
Renfro. svn path=/trunk/; revision=3696
generated by cgit v1.2.1 (git 2.18.0) at 2024-07-12 05:37:26 +0000