-
Notifications
You must be signed in to change notification settings - Fork 1
theclam/capshift
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
capshift v0.1 Alpha Written by Foeh Mannay, January 2015 PURPOSE ======= "capshift" is a tool which re-writes the timestamps of pcap files. This is useful when you have two pcap files taken from different devices whose clocks are not synchronised and you can't be bothered to repeatedly hand-correct the timestamps. Please see http://networkingbodges.blogspot.com/ for more information on this if you are interested. INSTALLATION ============ For Linux / Mac / MinGW it should be possible to build from source using: gcc -o capshift capshift.c I will make some binaries available for convenience but I make no assurances that I will keep them up to date. USAGE ===== There are only three parameters and all are mandatory. You must specify your input capture file (original pcap format) with the -r flag, your output capture file with the -w flag and your time offset with the -o flag. Here's an example: Harrys-MacBook-Air:stripe foeh$ ./capshift -r original.cap -w shifted.cap -o +14.5 Parsing capfile, attempting to shift forward by 14.5s... 45 frames processed. Harrys-MacBook-Air:stripe foeh$ CHANGE LOG ========== v0.1a First working release.
About
Shifts the timestamps of pcap files
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published