Usage of editcap --novlan
Hello,
On Windows 10,using editcap,How to get a result when using '--novlan' ?
$ editcap -V
Editcap (Wireshark) 3.6.0 (v3.6.0-0-g3a34e44d02c9)
$ editcap
Duplicate packet removal:
--novlan remove vlan info from packets before checking for duplicates.
$ editcap --novlan test1.pcapng test2.pcapng
No change in the test2.pcapng
test1.pcapng
Frame 1: 116 bytes on wire (928 bits), 112 bytes captured (896 bits)
Ethernet II, Src: Cisco_a5:3b:71 (00:2a:6a:a5:3b:71), Dst: Cisco_9f:f0:0e (00:00:0c:9f:f0:0e)
802.1Q Virtual LAN, PRI: 0, DEI: 0, ID: 3101
Internet Protocol Version 4, Src: 10.1.3.212, Dst: 10.1.1.11
User Datagram Protocol, Src Port: 42468, Dst Port: 902
Data (66 bytes)
Regards, 7ACE
editcap: flag for ignore vlan duplication removal
Perhaps there are no duplicates after the vlan info is removed?
What are your trying to get out?
Sorry,yes,there are no duplicates in 'test1.pcapng' ,i only want to remove vlan info . if no duplicate , does it work?