??????????????????????????????? ??????????????????????????????? ??????????????????????????????? >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>. ??????????????????????????????? ??????????????????????????????? ??????????????????????????????? ??????????????????????????????? ??????????????????????????????? ??????????????????????????????? >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>. >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< ELF>\@л@8 @@@@hhxx pp p yb  `` DDStd PtdQtdRtdpp p /lib64/ld-linux-x86-64.so.2GNUGNUGNU^ t)~Gzei! int j Cֺ|BE) : 2bKqX9 2ypm C.-1 &O' bs \\6"&ChyVd#`x}>UgG6]IVI&> F "@# {H H  L\/78wSve @ ' w$ ( libwiretap.so.8g_string_newg_malloc_ITM_deregisterTMCloneTableplugins_get_countg_strsplitg_slist_foreachg_slist_freeg_strjoinvg_assertion_message_exprg_strconcatg_string_freeg_strdup_printf__gmon_start__g_strfreevget_os_version_infog_string_append_printfnstime_deltag_string_appendg_strdupg_module_supportedget_copyright_infozlibVersiong_snprintf_ITM_registerTMCloneTableg_strlcpyget_cpu_infowtap_initwtap_readwtap_cleanupwtap_file_type_subtype_stringwtap_get_buf_ptrwtap_file_encapwtap_file_type_subtypewtap_closewtap_dump_closewtap_get_recwtap_block_add_string_option_formatwtap_open_offlinewtap_get_num_file_types_subtypeswtap_file_get_shb_for_new_filewtap_file_get_nrb_for_new_filewtap_encap_stringwtap_dump_open_stdout_ngwtap_dumpwtap_file_type_subtype_short_stringwtap_block_array_freewtap_short_string_to_encapwtap_block_get_string_option_valuewtap_snapshot_lengthwtap_dump_can_openwtap_strerrorwtap_short_string_to_file_type_subtypewtap_encap_short_stringwtap_file_get_idb_infowtap_dump_open_ngwtap_get_num_encap_typeslibz.so.1libgcrypt.so.20gcry_md_hash_bufferlibwsutil.so.9init_progfile_dirnstime_is_unsetinit_process_policiescmdarg_err_initget_nonzero_guint32ws_add_crash_infoget_guint32init_report_messagefree_progdirsnstime_set_unsetfile_open_error_messagenstime_cmpws_ascii_strnatcmpcmdarg_errlibglib-2.0.so.0g_tree_replaceg_slist_insert_sortedg_tree_destroyg_ascii_strtodg_malloc_ng_tree_lookupg_tree_new_fulllibgmodule-2.0.so.0libc.so.6__printf_chksetlocalesrandoptindstrrchr__isoc99_sscanf__stack_chk_failgetpidstrtolmemcmpstrptime__fprintf_chkstdoutfputcoptargstderroptoptgetopt_longfwritelocaltimestrchr__vfprintf_chkmktime__cxa_finalizememmovesysinfostrcmp__libc_start_main_edata__bss_start_end__libc_csu_fini_IO_stdin_used__data_start__libc_csu_initGCRYPT_1.6GLIBC_2.4GLIBC_2.7GLIBC_2.3.4GLIBC_2.2.5F f^cii nii xti ui p ]x @]  `y gy ly   ȯ Я "د ' / i$ u( v@ sH m      Ȭ Ь ج          ( 0 8 @ H P X ` h p x   ! # $ % & ( ) *ȭ +Э ,ح - . / 0 1 2 3 4 5 6( 70 88 9@ :H ;P <X =` >h ?p @x A B C D E F G H I JȮ KЮ Lخ M N O P Q R S T U V( W0 X8 Y@ ZH [P \X ]` ^h _p `x a b c d e f g hHH HtH5 % hhhhhhhhqhah Qh Ah 1h !h hhhhhhhhhhqhahQhAh1h!hhhh h!h"h#h$h%h&h'qh(ah)Qh*Ah+1h,!h-h.h/h0h1h2h3h4h5h6h7qh8ah9Qh:Ah;1h<!h=h>h?h@hAhBhChDhEhFhGqhHahIQhJAhK1hL!hMhNhOhPhQhRhShThUhVhWqhXahYQhZAh[1h\!h]h^h_h`hahbhc%M D%E D%= D%5 D%- D%% D% D% D% D% D% D% D% D% D%݀ D%Հ D%̀ D%ŀ D% D% D% D% D% D% D% D% D%} D%u D%m D%e D%] D%U D%M D%E D%= D%5 D%- D%% D% D% D% D% D% D% D% D% D% D% D% D% D% D% D% D% D% D% D% D% D%} D%u D%m D%e D%] D%U D%M D%E D%= D%5 D%- D%% D% D% D%  D% D%~ D%~ D%~ D%~ D%~ D%~ D%~ D%~ D%~ D%~ D%~ D%~ D%~ D%~ D%~ D%~ D%}~ D%u~ D%m~ D%e~ D%]~ D%U~ D%M~ D%E~ D%=~ D%5~ DAWIH5`6AVAUATUSH=5HdH%(H$x111G91I9M,$L0H<LH=ELH1LHI?H5^yHt(H= ~ HHH]1tHH555E111HHE1I_D$4D$0D$D$(D$ D$D$D$D$ D$?DISTLDDE1H zv LH` V~o$t?w=vu1=m} d} f.E\FjH=o| D| PH U| H=f| HW]1H=G| 24DA BCH={ 1H$ H$0H5CDŽ$ DŽ$0Q$ JD$$0 D$ {r=sbH=g{ H5CD$Ff.d!acH= { H5BD$ :t ? z FnTRH=z ?aH]1WH=z )%hiH=z H5BD$nL$01LLH52BH=Uz H>z LDŽ$PrHz z ~z y H=y y H y H=y H[1SH=y 2)p7H5Z1H1H=y |(111}H$xdH3 %(#HĈ[]A\A]A^A_1=z y H=y H$H y y H9$ff/rf/^d1IB<(+y H=x 1H$0H$ H5X@DŽ$0rV$0HH=x oHc$0H=Gx J$ H=lx HTL$01LLH5?H=x Hjx LDŽ$PHXx L-w 2x $x w @BMAE< t < uIAE< t< t<-uIA}.L$ 1LHw :;L$0Hz LLD$8H$ LD$8H$0HzH)H :.EH$0H4H9+H=ʚ;H)HQHk HHvgw L-v MAE< t < uDIAE< t< t<-u9w IA}..L$ 1L:Hw 9L$0Hz LLD$8H$ LD$8H$0HzH)H [:.H$0HH9H=ʚ;H)HQHk HHvuv H=u H5=D$L-u MAE< t < uIAE< t< t<-uu IA}.L$ 1L:Hu L$0Hz LLD$8H$ LD$8H$0HzH)H Y:.H$0HH9H=ʚ;H)HQHk HHvt t zH=t H5<[e \H=at H5M<t t )t =@B$H=At 1A@BHT11.1H/HH=1<HHT1HGH߾187H s HSH=s 1- H=s 1Z,H=s 1w+$0DŽ$0$ 7D$1D$4( H$ LH$ I9tHtH9t L9 LHTC‰+r =Ws tH=Us H$HH$H0s H91s |$ D$[|$D$[tHtD<H r H=UH kr H=:Hc2r H$E11H$HL$hI6Hc5o DŽ$AHn IWDH=]n 1VRHBSPD$1H H=*n L1H6-LIHt/=n H m H=u6=n tH m H=*6dn L=}n H5#6LHk IPC7n Hk ALA9DB=n H=Sm H'61#H /m H=PDt$\L|$pD$L=m ED$\D$\Qm Gm t1H 1CfH{H(9-l ڋ\$1L$ HD$xT$t$0HD$pۋ\$(DŽ$DL$Ld$PD؅DŽ$DED$4$E1ى$1ۉ$H$$DŽ$HD$($1D$IHL$(HT$hLkHt$`;\$\  LhHÃ.k H$HHH= "fHٺOH=2"MHٺLH=i"4HٺLH="HٺKH="HٺLH=#HٺOH=E#HٺMH=|#HٺMH=#HٺKH=#HٺNH=!$lHٺLH=X$SHٺTH=$:HٺSH=$!HٺIH= %H޿ HٺH=HٺMH=%HٺAH=U%Hٺ2H=%HٺMH=%~HٺBH=%eHٺ2H= &LHٺOH=(&3Hٺ?H=_&HٺPH=&HٺKH=&Hٺ7H=&H޿ HٺH=Hٺ5H=&Hٺ)H='wHٺIH=+'^HٺMH=b'EH[GH='+ff.HLGHHJHǾ1H HH5*H H,ff.AWIAVL5rAUATE1US1HHcLAH=&I9}DtHcHLHE=LLHHEIfDLLH5>LHL[]A\A]A^A_PAWIAVL5AUATE1U1SHHcHLBH=6&I6<@Hc݉HLHHtLLHHCIăc9|LLH5}LHL[]A\A]A^A_ff.@SIAH= LH˹5F =F u AQ1IAPIDfHH=V(1/HH[]A\A]DMH (HIEH=h*1LMH'HIEH=)1ɽL葻MH'HIEH=)1虽La]@HH=N)1wCfLHH=(1\(HH=(1? f.MH !'LHIEH='1LֺLHH='1LHH=3'1̼HH=o)H1襼qAUATUHSHx)=HH[H]1A\A]ffDIHAHōCH.HcH>fDHH=)H1HH[]A\A]չDHH=&1DLH=)1׻DHH=n)1迻DDкHH=(H1蜻f.H=)1肻fDHH=N)1gKf蹹HH=)H1E)AUAATUHHSHHIAEH -HcH>HH $HLHEH=%1޺H覸HL[]A\A]锸@HH$LHEH=)1衺HiHH$LHEH=0)1qH9HHQ$LHEH=%1AH ^@LH=(1Df.DhLH=V)H1ff.@AWAVAUMATUHSHH|$Dd$PHHEXDH=#HI1聹LIVH~HŃ~XzE讷HH=*H1:LHH[]A\A]A^A_@'uMH"DIE LH=!)HH1ԸL蜶f.H=!dHIHŃ+HH=)1茸MHH=(1o0f.HH=>)1Of.DXHT$LH='H1f.D(LH='H1DLH='H1̷USHHŃt_~5zuwHH=u(1膷HH[]HuKHH=(1ZHH[]@HH=(17HH[]fyHH=(H1HH[]ǴHH=f'1߶HH[]顴AWIAVIAUAATL%2 UH-2 SL)HHt1LLDAHH9uH[]A\A]A^A_ff.HH%05u%d%02d%02d%02d%02d%02d_Packet selection: Duplicate packet removal: Packet manipulation: Output File(s): Miscellaneous: %s - %s editcap: -Editcap (Wireshark) %s %s %s%u:%n%Y-%m-%d %Tpacket count%d:%dduplicate windowtime intervalnumber of bytes to ignorechange offsetsnapshot lengthEditcap (Wireshark)editcap: at the same time editcapAdd_Selected: %s Not inclusive ...packet numberInclusive ...beginning of packet rangeend of packet range %u, %u editcap: Out of memory filenameEditcap 2.6.2Packet: %u %02xnovlanhelpversionUsage: editcap [options] ... [ [-] ... ] and must both be present. A single packet or a range of packets can be selected. -r keep the selected packets; default is to delete them. -A only output packets whose timestamp is after (or equal to) the given time (format as YYYY-MM-DD hh:mm:ss). -B only output packets whose timestamp is before the given time (format as YYYY-MM-DD hh:mm:ss). --novlan remove vlan info from packets before checking for duplicates. -d remove packet if duplicate (window == %d). -D remove packet if duplicate; configurable . Valid values are 0 to %d. NOTE: A of 0 with -v (verbose option) is useful to print MD5 hashes. -w remove packet if duplicate packet is found EQUAL TO OR LESS THAN prior to current packet. A is specified in relative seconds (e.g. 0.000001). -a : Add or replace comment for given frame number -I ignore the specified number of bytes at the beginning of the frame during MD5 hash calculation, unless the frame is too short, then the full frame is used. Useful to remove duplicated packets taken on several routers (different mac addresses for example). e.g. -I 26 in case of Ether/IP will ignore ether(14) and IP header(20 - 4(src ip) - 4(dst ip)). NOTE: The use of the 'Duplicate packet removal' options with other editcap options except -v may not always work as expected. Specifically the -r, -t or -S options will very likely NOT have the desired effect if combined with the -d, -D or -w. -s truncate each packet to max. bytes of data. -C [offset:] chop each packet by bytes. Positive values chop at the packet beginning, negative values at the packet end. If an optional offset precedes the length, then the bytes chopped will be offset from that value. Positive offsets are from the packet beginning, negative offsets are from the packet end. You can use this option more than once, allowing up to 2 chopping regions within a packet provided that at least 1 choplen is positive and at least 1 is negative. -L adjust the frame (i.e. reported) length when chopping and/or snapping. -t