=head1 SYNOPSIS
B<editcap>
+S<[ B<-a> E<lt>frame:commentE<gt> ]>
S<[ B<-A> E<lt>start timeE<gt> ]>
S<[ B<-B> E<lt>stop timeE<gt> ]>
S<[ B<-c> E<lt>packets per fileE<gt> ]>
options (B<-d>, B<-D> and B<-w>) are used to control the packet window
or relative time window to be used for duplicate comparison.
+B<Editcap> can be used to assign comment strings to frame numbers.
+
B<Editcap> is able to detect, read and write the same capture files that
are supported by B<Wireshark>.
The input file doesn't need a specific filename extension; the file
=over 4
+=item -a E<lt>framenum:commentE<gt>
+
+For the specificed frame number, assign the given comment string.
+Can be repeated for multiple frames. Quotes should be used with comment
+strings that include spaces.
+
=item -A E<lt>start timeE<gt>
Saves only the packets whose timestamp is on or after start time.
7) editcap -C -45:20 -C -60:-10 capture.pcap chopped.pcap
8) editcap -C -45:20 -C 15:-10 capture.pcap chopped.pcap
+To add comment strings to the first 2 input frames, use:
+
+ editcap -a "1:1st frame" -a 2:Second capture.pcap capture-comments.pcap
+
=head1 SEE ALSO
pcap(3), wireshark(1), tshark(1), mergecap(1), dumpcap(1), capinfos(1),