editcap: clarify relation between -A/-B and -r

Change wording so that the order of processing becomes more apparent.

Closes #17109
This commit is contained in:
Jaap Keuter 2020-12-28 18:26:16 +01:00 committed by AndersBroman
parent f652c79d5e
commit b3d6580b4f
2 changed files with 7 additions and 4 deletions

View File

@ -58,6 +58,9 @@ resulting packets to the capture I<outfile> (or outfiles).
By default, it reads all packets from the I<infile> and writes them to the
I<outfile> in pcapng file format.
The B<-A> and B<-B> option allow you to limit the time range from which packets
are read from the I<infile>.
An optional list of packet numbers can be specified on the command tail;
individual packet numbers separated by whitespace and/or ranges of packet
numbers can be specified as I<start>-I<end>, referring to all packets from
@ -97,13 +100,13 @@ strings that include spaces.
=item -A E<lt>start timeE<gt>
Saves only the packets whose timestamp is on or after start time.
Reads only the packets whose timestamp is on or after start time.
The time is given in the following format YYYY-MM-DD HH:MM:SS[.nnnnnnnnn]
(the decimal and fractional seconds are optional).
=item -B E<lt>stop timeE<gt>
Saves only the packets whose timestamp is before stop time.
Reads only the packets whose timestamp is before stop time.
The time is given in the following format YYYY-MM-DD HH:MM:SS[.nnnnnnnnn]
(the decimal and fractional seconds are optional).

View File

@ -758,9 +758,9 @@ print_usage(FILE *output)
fprintf(output, "\n");
fprintf(output, "Packet selection:\n");
fprintf(output, " -r keep the selected packets; default is to delete them.\n");
fprintf(output, " -A <start time> only output packets whose timestamp is after (or equal\n");
fprintf(output, " -A <start time> only read packets whose timestamp is after (or equal\n");
fprintf(output, " to) the given time (format as YYYY-MM-DD hh:mm:ss[.nnnnnnnnn]).\n");
fprintf(output, " -B <stop time> only output packets whose timestamp is before the\n");
fprintf(output, " -B <stop time> only read packets whose timestamp is before the\n");
fprintf(output, " given time (format as YYYY-MM-DD hh:mm:ss[.nnnnnnnnn]).\n");
fprintf(output, "\n");
fprintf(output, "Duplicate packet removal:\n");