Wireshark · Wireshark-users: [Wireshark-users] editcap time packet selection formatting

[kenny <sigafoose@xxxxxxxxx>]

I am using the following command:

editcap -A 2013-06-18 11:36:48 -B 2013-06-18 11:40:48 in.pcap out.pcap

It seems to be formatted correctly however the output of the editcap command is complaining about the formatting of the -A option.

"editcap: "2013-06-18" isn't a valid time format"

Please advise to my err if time permits, thanks!

Editcap 1.10.1 (SVN Rev 50926 from /trunk-1.10)

wireshark 1.10.1 (SVN Rev 50926 from /trunk-1.10)

Copyright 1998-2013 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.

This is free software; see the source for copying conditions. There is NO

warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.17, with Cairo 1.10.2, with Pango 1.30.1, with

GLib 2.36.0, with libpcap, with libz 1.2.5, without POSIX capabilities, without

libnl, with SMI 0.4.8, without c-ares, without ADNS, with Lua 5.1, without

Python, with GnuTLS 2.12.19, with Gcrypt 1.5.0, with MIT Kerberos, with GeoIP,

with PortAudio V19-devel (built Jul 16 2013 19:05:52), with AirPcap.

Running on Mac OS X 10.8.4, build 12E55 (Darwin 12.4.0), with locale .UTF-8,

with libpcap version 1.1.1, with libz 1.2.5, GnuTLS 2.12.19, Gcrypt 1.5.0,

without AirPcap.

      Intel(R) Core(TM) i7-3615QM CPU @ 2.30GHz

Built using llvm-gcc 4.2.1 (Based on Apple Inc. build 5658) (LLVM build

2336.9.00).