Wireshark · Wireshark-dev: Re: [Wireshark-dev] How to find duplicate packets with time interval less than 2ms

[Stephen Fisher <stephentfisher@xxxxxxxxx>]

On Thu, Nov 27, 2008 at 11:43:58PM +0100, Petr Janata wrote:

> I am traiyng to modify editcap, because there is parameter '-d' for 
> skipping duplicate packets. I am going to filter those packets witche 
> have time interval less then 2ms. Do you have any idea?

According to editcap's man page, "the length and MD5 sum of the MD5 sum 
of the current packet are compared to the previous four packets."  Do 
you want to change this to 2ms instead?


Steve