Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Specifying a date range in editcap

From: "Jeroen Eeuwes" <jeroeneeuwes@xxxxxxxxx>
Date: Fri, 7 Dec 2007 16:51:44 +0100
Hi Andrew,

> editcap -r -A 2007:12:06 15:00:00 -B  2007-12-06 16:00:00 Infile.cap
> Outfile.cap

You should use - instead of : as seperator for the date (just like you
did with the -B parameter).

Best regards,
Jeroen