Wireshark-users: [Wireshark-users] Specifying a date range in editcap
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Andrew Chalk" <achalk@xxxxxxxxxxxxxxxxxxxxxx>
Date: Fri, 7 Dec 2007 06:55:41 -0600

I want to include only a time range of records in a new file created with editcap. If I use the following command line:

 

editcap -r -A 2007:12:06 15:00:00 -B  2007-12-06 16:00:00 Infile.cap Outfile.cap

 

I get the error message:

editcap: "2007:12:06" isn't a valid time format

 

Could someone tell me the correct time format? The one I am using conforms to the ‘-h’ specification.

 

This is Editcap 0.99.6a (SVN Rev 22276).

 

Many thanks!