From 9045703e2c55f45844b521ddeb027bbc12f4b220 Mon Sep 17 00:00:00 2001
From: Gerald Combs <gerald@wireshark.org>
Date: Thu, 27 Jul 2006 17:53:29 +0000
Subject: Add duplicate frame detection (and removal) to editcap.  (Some
 switches generate duplicate packets when a mirror/SPAN port is
 misconfigured).

svn path=/trunk/; revision=18800
---
 doc/editcap.pod | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'doc/editcap.pod')

diff --git a/doc/editcap.pod b/doc/editcap.pod
index 8e3cb6327c..1abf4a7a77 100644
--- a/doc/editcap.pod
+++ b/doc/editcap.pod
@@ -8,6 +8,7 @@ editcap - Edit and/or translate the format of capture files
 B<editcap>
 S<[ B<-c> E<lt>packets per fileE<gt> ]>
 S<[ B<-C> E<lt>choplenE<gt> ]>
+S<[ B<-d> ]>
 S<[ B<-E> E<lt>error probabilityE<gt> ]>
 S<[ B<-F> E<lt>file formatE<gt> ]>
 S<[ B<-A> E<lt>start timeE<gt> ]>
@@ -71,6 +72,12 @@ Each packet is chopped at the packet end by a few <choplen> bytes of data.
 This is useful in the rare case that the conversion between two file 
 formats leaves some random bytes at the end of each packet.
 
+=item -d
+
+Attempts to remove duplicate packets.  The length and MD5 sum of the 
+current packet are compared to the previous four packets.  If a match 
+is found, the packet is skipped.
+
 =item -E  E<lt>error probabilityE<gt>
 
 Sets the probabilty that bytes in the output file are randomly changed.
-- 
cgit v1.2.3