Xavier Brouckaert wrote:
How do you do that ? Is there a tool for this ? editcap cannot remove a single broken packet.
No? Assuming it doesn't choke on the bogus packet, and you know its' sequence number, something like 'editcap <original file> <fixed file> <# of bogus packet>' should do it...
--
Regards,
Marco.
- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
