Patch to editcap to allow chop from beginning of packet for decapsulation
This issue was migrated from bug 5240 in our old bug tracker.
Original bug information:
Reporter: Jason Masker
Status: RESOLVED FIXED
Product: Wireshark
Component: Extras
OS: All
Platform: All
Version: Git
Attachments:
editcap.c.patch: Add decapsulate capability to editcap
t1.pcap: Sample ERSPAN Capture
t2.pcap: t1.pcap decapsulated using 'editcap -C 50'
editcap.c.patch: Add decapsulate capability to editcap, update documentation
editcap.c.patch: Add decapsulate capability to editcap, update documentation
editcap.c.patch: Modify -C to allow chopping at beginning or end of packet
editcap_chop.patch: Modify -C to allow chopping at beginning or end of packet