Wireshark-users: Re: [Wireshark-users] Specifying a date range in editcap
From: "Jeroen Eeuwes" <jeroeneeuwes@xxxxxxxxx>
Date: Fri, 7 Dec 2007 16:51:44 +0100
Hi Andrew,

> editcap -r -A 2007:12:06 15:00:00 -B  2007-12-06 16:00:00 Infile.cap
> Outfile.cap

You should use - instead of : as seperator for the date (just like you
did with the -B parameter).

Best regards,
Jeroen