Skip to content

theclam/capshift

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

capshift v0.1 Alpha
Written by Foeh Mannay, January 2015

PURPOSE
=======

"capshift" is a tool which re-writes the timestamps of pcap files. This is useful when
you have two pcap files taken from different devices whose clocks are not synchronised
and you can't be bothered to repeatedly hand-correct the timestamps.

Please see http://networkingbodges.blogspot.com/ for more information on this if you 
are interested.

INSTALLATION
============

For Linux / Mac / MinGW it should be possible to build from source using:

gcc -o capshift capshift.c

I will make some binaries available for convenience but I make no assurances that I will
keep them up to date.

USAGE
=====

There are only three parameters and all are mandatory. You must specify your
input capture file (original pcap format) with the -r flag, your output capture file
with the -w flag and your time offset with the -o flag. Here's an example:

Harrys-MacBook-Air:stripe foeh$ ./capshift -r original.cap -w shifted.cap -o +14.5

Parsing capfile, attempting to shift forward by 14.5s...

45 frames processed.
Harrys-MacBook-Air:stripe foeh$

CHANGE LOG
==========

v0.1a	First working release.

About

Shifts the timestamps of pcap files

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages