Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4070] Add a facility within wireshark to remove duplicate

Date: Tue, 30 Nov 2010 11:03:34 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4070

--- Comment #10 from Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx> 2010-11-30 12:03:33 MST ---
(In reply to comment #9)

> Good tip, although as I understand it, this will only catch exact duplicates,
> i.e., frames with all data exactly the same, even timestamps, right?  As Jaap
> pointed out in comment #3, if there are many duplicates due to ingress+egress,
> then timestamps might differ slightly, so the md5 hashes will also be
> different, even though for all practical purposes, those frames are still
> really duplicates.

The timestamps are stored in the capture file instead of the packet's data, but
this sort of issue recently led me to commit SVN revision 34245, which provides
a preference to generate an MD5 hash of the payload in the data dissector for
something I was working on.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.