ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 5240] Patch to editcap to allow chop from beginning of pac

Date: Wed, 22 Sep 2010 10:17:02 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5240

--- Comment #7 from Sake <sake@xxxxxxxxxx> 2010-09-22 10:16:57 PDT ---
(In reply to comment #6)
> Swapped order of -C & -P parameters in 'editcap -h' output for consistency with
> documentation.

I never figured out in which cases to chop of a fixed amount of bytes of the
end of the packet, but I do understand the usefulness of chopping of an amount
of bytes from the beginning.

Would it be an idea to use -C for both and change it's behavior to do the
following:

- a positive value will chop off that amount of bytes from the beginning of the
packet
- a negative value will chop off the (absolute) amount of bytes from the end of
the packet

That would change the behavior of the current implementation of -C, but it will
adhere more to general use of negative and positive values when it comes to
chopping. And I doubt if the feature is used much in its current form.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.