Wireshark mailing list archives
Editcap and timestamps
From: Wu Weidong <hjazz6 () ymail com>
Date: Thu, 4 Aug 2011 23:54:05 -0700 (PDT)
Hi, Does editcap depend on packet timestamp in anyway? I was able to extract specific packets using editcap on pcap files that were recorded from live traffic, but was unable to extract any packets on processed pcap files that have packet timestamps as 0. Thank you. Regards, Rayne
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Editcap and timestamps Wu Weidong (Aug 04)
- Re: Editcap and timestamps Jeff Morriss (Aug 05)