python (65.1k questions)

javascript (44.2k questions)

reactjs (22.7k questions)

java (20.8k questions)

c# (17.4k questions)

html (16.3k questions)

r (13.7k questions)

android (12.9k questions)

Questions - editcap

editcap adjust the time of specific frames

I have a .pcap file where I want to keep the timestamp of the first frame but adjust the time for every other frame. According to the man page it would seem that you can only adjust the time of every ...
test-img

Eric Pereira

timestamp

wireshark

editcap

Votes: 0

Answers: 1

Latest Answer

I have a .pcap file where I want to keep the timestamp of the first frame but adjust the time for every other frame. Is there some way to split that allows for the alteration of specific, or at least...
test-img

user16139739

Remove trailer timestamp from the captured packets

I have a packet capture captured through a special switch that appends timestamps just before FCS. These are generally referred as "trailer timestamps". However, after doing so, the FCS at t...
test-img

Sandeep

wireshark

ethernet

pcap

tcpdump

editcap

Votes: 0

Answers: 3

Latest Answer

Please file an issue for this on the Wireshark issue list; it might make sense to treat frames with capture-switch trailers specially.
test-img

user16139739

editcap -A and -B: using timestamp with nanoseconds example

I'm trying to get editcap to use a timestamp with nanoseconds, but I am unable to do this. sample timestamp: 2022-01-23 23:10:05.237000000Z TZ=UTC editcap -A '2022-01-23 23:10:05.237000000Z' -F nsecli...
test-img

Silentterms

editcap

Votes: 0

Answers: 1

Latest Answer

At least one of your command-line options to editcap is incorrect. If you run editcap -F as suggested in the man page, you'll see that nseclibpcap is not a valid output capture file format. Try runn...
test-img

Christopher Maynard

Posts

Questions

Blogs

Jobs