path: root/doc/editcap.pod
diff options
authorGerald Combs <gerald@wireshark.org>2006-07-27 17:53:29 +0000
committerGerald Combs <gerald@wireshark.org>2006-07-27 17:53:29 +0000
commit9045703e2c55f45844b521ddeb027bbc12f4b220 (patch)
treeb93511f5ac4d66175a0983f6a8f4d591c79b638a /doc/editcap.pod
parent52e9a9c01226cb5999c62fe3008bff0bef0265ce (diff)
Add duplicate frame detection (and removal) to editcap. (Some switches
generate duplicate packets when a mirror/SPAN port is misconfigured). svn path=/trunk/; revision=18800
Diffstat (limited to 'doc/editcap.pod')
1 files changed, 7 insertions, 0 deletions
diff --git a/doc/editcap.pod b/doc/editcap.pod
index 8e3cb6327c..1abf4a7a77 100644
--- a/doc/editcap.pod
+++ b/doc/editcap.pod
@@ -8,6 +8,7 @@ editcap - Edit and/or translate the format of capture files
S<[ B<-c> E<lt>packets per fileE<gt> ]>
S<[ B<-C> E<lt>choplenE<gt> ]>
+S<[ B<-d> ]>
S<[ B<-E> E<lt>error probabilityE<gt> ]>
S<[ B<-F> E<lt>file formatE<gt> ]>
S<[ B<-A> E<lt>start timeE<gt> ]>
@@ -71,6 +72,12 @@ Each packet is chopped at the packet end by a few <choplen> bytes of data.
This is useful in the rare case that the conversion between two file
formats leaves some random bytes at the end of each packet.
+=item -d
+Attempts to remove duplicate packets. The length and MD5 sum of the
+current packet are compared to the previous four packets. If a match
+is found, the packet is skipped.
=item -E E<lt>error probabilityE<gt>
Sets the probabilty that bytes in the output file are randomly changed.