Wireshark-users: Re: [Wireshark-users] Specifying a date range in editcap
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Andrew Chalk" <achalk@xxxxxxxxxxxxxxxxxxxxxx>
Date: Mon, 24 Dec 2007 17:37:00 -0600
No luck. Same result.

"Jeroen Eeuwes" <jeroeneeuwes@xxxxxxxxx> wrote 
in message 
news:65a16ec20712070818w73fee583gcea5f943a0150928@xxxxxxxxxxxxxx...
> Hi Andrew,
>
>> editcap: "2007-12-06" isn't a valid time format
>
> The parameter for the -A file is split up due to the space between the
> date and time. You should try putting quotes around the date-time.
> Eg.:
>
> editcap -r -A "2007-12-06 15:00:00" -B "2007-12-06 16:00:00"
> Infile.cap Outfile.cap
>
> or remove the space:
>
> editcap -r -A 2007-12-0615:00:00 -B 2007-12-0616:00:00 Infile.cap 
> Outfile.cap
>
> Best regards,
> Jeroen
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users
>