diff --git a/doc/editcap.pod b/doc/editcap.pod index e30424cd89..b865b2c731 100644 --- a/doc/editcap.pod +++ b/doc/editcap.pod @@ -92,13 +92,17 @@ opened. The default is to use a single output file. =item -C EchoplenE Sets the chop length to use when writing the packet data. Each packet is -chopped by a few bytes of data. Positive values chop at the packet +chopped by bytes of data. Positive values chop at the packet beginning while negative values chop at the packet end. This is useful for chopping headers for decapsulation of an entire capture or in the rare case that the conversion between two file formats leaves some random bytes at the end of each packet. +NOTE: This option can be used more than once, effectively allowing you to chop +bytes from the beginning of a packet as well as from the end of a packet in a +single step. + =item -d Attempts to remove duplicate packets. The length and MD5 hash of the diff --git a/docbook/release-notes.asciidoc b/docbook/release-notes.asciidoc index cfd17ba500..6bbee7c69b 100644 --- a/docbook/release-notes.asciidoc +++ b/docbook/release-notes.asciidoc @@ -22,12 +22,19 @@ The following bugs have been fixed: The following features are new (or have been significantly updated) since version 1.10: -* Expert info is now filterable (if the dissector has been updated to support the new API). -* The Windows installer now uninstalls the previous version of Wireshark silently. -You can still run the uninstaller manually beforehand if you wish to run it interactively. -* The "Number" column shows related packets and protocol conversation spans (Qt only). -* When manipulating packets with editcap using the -C and/or -s options, - it is now possible to also adjust the original frame length using the -L option. +* Expert info is now filterable (if the dissector has been updated to support + the new API). +* The Windows installer now uninstalls the previous version of Wireshark + silently. You can still run the uninstaller manually beforehand if you wish + to run it interactively. +* The "Number" column shows related packets and protocol conversation spans + (Qt only). +* When manipulating packets with editcap using the -C and/or + -s options, it is now possible to also adjust the original frame + length using the -L option. +* You can now pass the -C option to editcap multiple times, which + allows you to chop bytes from the beginning of a packet as well as at the end + of a packet in a single step. === New Protocol Support diff --git a/editcap.c b/editcap.c index 0080e536f2..f0c1adf29f 100644 --- a/editcap.c +++ b/editcap.c @@ -733,7 +733,7 @@ usage(gboolean is_error) fprintf(output, " -s truncate each packet to max. bytes of data.\n"); fprintf(output, " -C chop each packet by bytes. Positive values\n"); fprintf(output, " chop at the packet beginning, negative values at the\n"); - fprintf(output, " packet end.\n"); + fprintf(output, " packet end. You can use this option more than once.\n"); fprintf(output, " -L adjust the frame length when chopping and/or snapping\n"); fprintf(output, " -t