Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4070] Add a facility within wireshark to remove duplicate

Date: Thu, 17 Dec 2009 17:43:29 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4070

--- Comment #6 from Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx> 2009-12-17 18:43:28 MST ---
(In reply to comment #5)
> I was thinking to add an option to deduplicate before saving to dumpcap. Of
> course we could also add that option to tshark and wireshark to filter out
> duplicates when reading from file. To me that seems more logical than to keep
> the duplicates in memory but ignored.

Isn't dumpcap's purpose (or at least common use outside of being a child of
wireshark/tshark) to just capture and write packets to disk with as little
overhead as possible though?  I haven't looked at how editcap weeds out
duplicates though, so maybe it isn't as involved as I think.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.