First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

capinfos -S output is too much

Hello，

On Windows 10,"capinfos -S",is the command output too much ?

$ capinfos -S test.pcapng
File name:           test.pcapng
File type:           Wireshark/... - pcapng
File encapsulation:  Ethernet
File timestamp precision:  microseconds (6)
Packet size limit:   file hdr: (not set)
Number of packets:   20 k
File size:           9213 kB
Data size:           8530 kB
Capture duration:    37.528437 seconds
First packet time:   1629034467.791910
Last packet time:    1629034505.320347
......


Is it right ?
$ capinfos -S test.pcapng
First packet time:   1629034467.791910
Last packet time:    1629034505.320347


$ capinfos -v                                                                              
Capinfos (Wireshark) 3.6.0 (v3.6.0-0-g3a34e44d02c9)

Sorry,please forgive my english.

Regards, 7ACE

7ACE's avatar
40
7ACE
asked 2021-12-06 01:44:15 +0000, updated 2021-12-06 01:48:27 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Add an option to capinfos to print start and end times as seconds, which makes time-shifting using editcap easier.

    case 'S':
      time_as_secs = TRUE;
      break;


Perhaps the man page should explain that it only modifies the format of those values.
Output is not limited to just those values such as -t just printing the capture type.

Chuckc's avatar
3k
Chuckc
answered 2021-12-06 02:05:24 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Thank you for the clear explanation.

if (report_all_infos) disable_all_infos();

  case 'e':
    if (report_all_infos) disable_all_infos();
    cap_end_time = TRUE;
    break;

  case 'S':
    time_as_secs = TRUE;
    break;

  case 'y':
    if (report_all_infos) disable_all_infos();
    cap_data_rate_byte = TRUE;
    break;
7ACE's avatar 7ACE (2021-12-06 03:13:17 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer