wireshark-3.6.1/doc/editcap.adoc

63 __outfile__ in pcapng file format.
214 is the *pcapng* format.
424 within the pcapng output file. This enables decryption without requiring
471     editcap -s 64 -F snoop capture.pcapng shortcapture.snoop
475     editcap capture.pcapng sans1000.pcapng 1000
479     editcap -r capture.pcapng small.pcapng 200-750
483     editcap -r capture.pcapng first500.pcapng 1-500
487     editcap capture.pcapng first500.pcapng 501-9999999
491     editcap capture.pcapng exclude.pcapng 1 5 10-20 30-40
495     editcap -r capture.pcapng select.pcapng 1 5 10-20 30-40
499     editcap -d capture.pcapng dedup.pcapng
503     editcap -d --skip-radiotap-header capture.pcapng dedup.pcapng
507     editcap -D 101 capture.pcapng dedup.pcapng
511     editcap -w 0.1 capture.pcapng dedup.pcapng
516     editcap -v -D 0 capture.pcapng /dev/null
520     editcap -v -D 0 capture.pcapng NUL
524     editcap -t 3.0827 capture.pcapng adjusted.pcapng
528     editcap -S 0 capture.pcapng adjusted.pcapng
532     editcap -E 0.05 capture.pcapng capture_error.pcapng
537     editcap -L -C 12:4 capture_vlan.pcapng capture_no_vlan.pcapng
548     1) editcap -C 5:10 -C -25:-20 capture.pcapng chopped.pcapng
549     2) editcap -C 5:10 -C 50:-20 capture.pcapng chopped.pcapng
550     3) editcap -C -70:10 -C -25:-20 capture.pcapng chopped.pcapng
551     4) editcap -C -70:10 -C 50:-20 capture.pcapng chopped.pcapng
552     5) editcap -C 30:20 -C -60:-10 capture.pcapng chopped.pcapng
553     6) editcap -C 30:20 -C 15:-10 capture.pcapng chopped.pcapng
554     7) editcap -C -45:20 -C -60:-10 capture.pcapng chopped.pcapng
555     8) editcap -C -45:20 -C 15:-10 capture.pcapng chopped.pcapng
559     editcap -a "1:1st frame" -a 2:Second capture.pcapng capture-comments.pcapng