Ask Your Question

Revision history [back]

Usage of editcap --novlan

Hello,

On Windows 10,using editcap,How to get a result when using '--novlan' ?

$ editcap -V
Editcap (Wireshark) 3.6.0 (v3.6.0-0-g3a34e44d02c9)

$ editcap
Duplicate packet removal:
--novlan               remove vlan info from packets before checking for duplicates.

$ editcap --novlan test1.pcapng test2.pcapng
No change in the test2.pcapng

test1.pcapng
Frame 1: 116 bytes on wire (928 bits), 112 bytes captured (896 bits)
Ethernet II, Src: Cisco_a5:3b:71 (00:2a:6a:a5:3b:71), Dst: Cisco_9f:f0:0e (00:00:0c:9f:f0:0e)
802.1Q Virtual LAN, PRI: 0, DEI: 0, ID: 3101
Internet Protocol Version 4, Src: 10.1.3.212, Dst: 10.1.1.11
User Datagram Protocol, Src Port: 42468, Dst Port: 902
Data (66 bytes)

Regards, 7ACE