forked from osmocom/wireshark
3773a7561c
In some cases "-v" was already used so "-V" is the option. Note that the version information in these utilities is much shorter than what is presented by the big programs. As requested by https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5804 Bug: 5804 Change-Id: I35db35a4eace2797afd895f9be7322ef39928480 Reviewed-on: https://code.wireshark.org/review/2489 Reviewed-by: Guy Harris <guy@alum.mit.edu>
72 lines
2 KiB
Text
72 lines
2 KiB
Text
|
|
=head1 NAME
|
|
|
|
reordercap - Reorder input file by timestamp into output file
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
B<reordercap>
|
|
S<[ B<-n> ]>
|
|
S<[ B<-v> ]>
|
|
E<lt>I<infile>E<gt> E<lt>I<outfile>E<gt>
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
B<Reordercap> is a program that reads an input capture file and rewrites the
|
|
frames to an output capture file, but with the frames sorted by increasing
|
|
timestamp.
|
|
|
|
This functionality may be useful when capture files have been created by
|
|
combining frames from more than one well-synchronised source, but the
|
|
frames have not been combined in strict time order.
|
|
|
|
B<Reordercap> writes the output capture file in the same format as the input
|
|
capture file.
|
|
|
|
B<Reordercap> is able to detect, read and write the same capture files that
|
|
are supported by B<Wireshark>.
|
|
The input file doesn't need a specific filename extension; the file
|
|
format and an optional gzip compression will be detected automatically.
|
|
Near the beginning of the DESCRIPTION section of wireshark(1) or
|
|
L<http://www.wireshark.org/docs/man-pages/wireshark.html>
|
|
is a detailed description of the way B<Wireshark> handles this, which is
|
|
the same way B<reordercap> handles this.
|
|
|
|
=head1 OPTIONS
|
|
|
|
=over 4
|
|
|
|
=item -n
|
|
|
|
When the B<-n> option is used, B<reordercap> will not write out the output
|
|
file if it finds that the input file is already in order.
|
|
|
|
=item -v
|
|
|
|
Print the version and exit.
|
|
|
|
=back
|
|
|
|
=head1 SEE ALSO
|
|
|
|
pcap(3), wireshark(1), tshark(1), dumpcap(1), editcap(1), mergecap(1),
|
|
text2pcap(1), pcap-filter(7) or tcpdump(8)
|
|
|
|
=head1 NOTES
|
|
|
|
B<Reordercap> is part of the B<Wireshark> distribution. The latest version
|
|
of B<Wireshark> can be found at L<http://www.wireshark.org>.
|
|
|
|
It may make sense to move this functionality into B<editcap>, or perhaps
|
|
B<mergecap>, in which case B<reordercap> could be retired.
|
|
|
|
HTML versions of the Wireshark project man pages are available at:
|
|
L<http://www.wireshark.org/docs/man-pages>.
|
|
|
|
=head1 AUTHORS
|
|
|
|
Original Author
|
|
-------- ------
|
|
Martin Mathieson <martin.r.mathieson[AT]googlemail.com>
|
|
|