Hi Andrew, > editcap -r -A 2007:12:06 15:00:00 -B 2007-12-06 16:00:00 Infile.cap > Outfile.cap
You should use - instead of : as seperator for the date (just like you did with the -B parameter). Best regards, Jeroen _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
