Bug#616415: editcap: removal does not work for merged captures

2011-03-05 Thread Bálint Réczey
severity 616415 wishlist tags 616415 wonfix thanks Hi, Editcap does not analyze the packets and it would not be practical to implement such feature in editcap. This feature could be implemented in Wireshark or in tshark, but we would need to implement arbitrarily complex filters. On the other

Bug#616415: editcap: removal does not work for merged captures

2011-03-04 Thread Ph. Marek
Package: wireshark-common Version: 1.4.4-1 Severity: normal When having merged captures from two machines the remove duplicates option in editcap doesn't work, because the identical packets have a different header field packet type with values Sent by us (4) vs. unicast to us (0), and so the MD5