Wireshark · Ethereal-dev: [Ethereal-dev] Could someone with more knowledge than me update/improve the editcap manpage?

[Ulf Lamping <ulf.lamping@xxxxxx>]

Hi List!

The description of the packet range and the -r option seems to be 
misleading.

As I don't know the current implementation well, could someone have a 
look at it?


Description:

A list of packet numbers can be specified on the command line; the 
packets with those numbers will /not/ be written to the capture file, 
unless the *-r* flag is specified, in which case /only/ those packets 
will be written to the capture file. Ranges of packet numbers can be 
specified as /start/-/end/, referring to all packets from /start/ to 
/end/ (removing them all if *-r* isn't specified, including them all if 
*-r* is specified).

Options:

*-r*
   Causes the packets whose packet numbers are specified on the command
   line to be written to the output capture file, and no other packets
   to be written to the output capture file.



The information that a range of packets can be specified is buried very 
deeply inside the Description only. Information that an "open end" range 
e.g. "10000-" is also possible is completely missing.

As this is one of the major usages of the tool it should be in a more 
prominent place.

Regards, ULFL