Wireshark-bugs: [Wireshark-bugs] [Bug 1158] Editcap Stop time option
Date: Mon, 16 Oct 2006 17:28:56 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1158


luis.ontanon@xxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED




------- Comment #3 from luis.ontanon@xxxxxxxxx  2006-10-16 17:28 GMT -------
(In reply to comment #0)
> Build Information:
> Version 0.99.3 (SVN Rev 19011)
> --
> When I try to use the -B option there is no data extracted from the captire
> file.  I have tried setting the date time format with quotes and without, and I
> still unable to extract the data that I want
> editcap -r -B "2006-10-10 03:58:00" c:\cds\Capture1_00005_2
> 0061010035020 mini

does the file actualy has any packets whith timestamps before 2006-10-10
03:58:00 ??

Could you try:

editcap -A "2006-10-10 03:57:59" xxx.cap

and see if that works?

Luis


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.