diff options
author | kardam <netkardam@gmail.com> | 2014-09-14 03:01:05 +0200 |
---|---|---|
committer | Evan Huus <eapache@gmail.com> | 2014-09-20 18:11:35 +0000 |
commit | ba8617f0400efe47931495fc3f2502f24161dd4b (patch) | |
tree | e0c870ee0e9e911b67dd22f3250ea2e120e6d46b /doc | |
parent | 2154e2346ed6dcbf5c7e270dbcc0f4a9a727b7a0 (diff) |
Add -I option in editcap to extend Duplicate packet removal
Description:
Ignore the specified bytes number at the beginning of the frame during MD5 hash calculation.
Useful to remove duplicated packets taken on several routers or SW(differents mac addresses for example).
e.g. -I 26 in case of Ether/IP/ will ignore ether(14) and IP header(20 - 4(src ip) - 4(dst ip)).
The default value is 0.
This option is only relevant when used with -d|-D|-w
Bug: 8511
Change-Id: I009a09d32778a182b2d88f372651f658a4938882
Reviewed-on: https://code.wireshark.org/review/4104
Tested-by: Evan Huus <eapache@gmail.com>
Reviewed-by: Evan Huus <eapache@gmail.com>
Diffstat (limited to 'doc')
-rw-r--r-- | doc/editcap.pod | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/doc/editcap.pod b/doc/editcap.pod index f8efcb774d..bd5ea6913a 100644 --- a/doc/editcap.pod +++ b/doc/editcap.pod @@ -30,6 +30,7 @@ S< B<-d> > | S< B<-D> E<lt>dup windowE<gt> > | S< B<-w> E<lt>dup time windowE<gt> > S<[ B<-v> ]> +S<[ B<-I> E<lt>bytes to ignoreE<gt> ]> I<infile> I<outfile> @@ -165,6 +166,13 @@ be created with a suffix -nnnnn, starting with 00000. If packets for the specifi time interval are written to the output file, the next output file is opened. The default is to use a single output file. +=item -I E<lt>bytes to ignoreE<gt> + +Ignore the specified bytes number at the beginning of the frame during MD5 hash calculation +Useful to remove duplicated packets taken on several routers(differents mac addresses for example) +e.g. -I 26 in case of Ether/IP/ will ignore ether(14) and IP header(20 - 4(src ip) - 4(dst ip)). +The default value is 0. + =item -L Adjust the original frame length accordingly when chopping and/or snapping |