Manual Reference Pages - REORDERCAP (1)
reordercap - Reorder input file by timestamp into output file
[ -n ]
[ -v ]
Reordercap is a program that reads an input capture file and rewrites the
frames to an output capture file, but with the frames sorted by increasing
This functionality may be useful when capture files have been created by
combining frames from more than one well-synchronised source, but the
frames have not been combined in strict time order.
Reordercap writes the output capture file in the same format as the input
Reordercap is able to detect, read and write the same capture files that
are supported by Wireshark.
The input file doesnt need a specific filename extension; the file
format and an optional gzip compression will be detected automatically.
Near the beginning of the DESCRIPTION section of wireshark(1) or
is a detailed description of the way Wireshark handles this, which is
the same way reordercap handles this.
When the -n option is used, reordercap will not write out the output
file if it finds that the input file is already in order.
Print the version and exit.
pcap(3), wireshark(1), tshark(1), dumpcap(1), editcap(1), mergecap(1),
text2pcap(1), pcap-filter(7) or tcpdump(8)
Reordercap is part of the Wireshark distribution. The latest version
of Wireshark can be found at <https://www.wireshark.org>.
It may make sense to move this functionality into editcap, or perhaps
mergecap, in which case reordercap could be retired.
HTML versions of the Wireshark project man pages are available at:
Martin Mathieson <martin.r.mathieson[AT]googlemail.com>
|2.0.2 ||REORDERCAP (1) ||2016-02-26 |
Visit the GSP FreeBSD Man Page Interface.
Output converted with manServer 1.07.