Re: [tcpdump-workers] trimming bytes from already captured packets

2011-12-09 Thread Guy Harris
On Dec 9, 2011, at 11:41 AM, Rick Jones wrote: > I have some packet captures which were taken with a snaplen of 128 bytes, but > I would like to convert that to one with a snaplen of say 66 bytes. The > existing tcpdump/libpcap does not *seem* to do that - is there already a > utility out the

[tcpdump-workers] trimming bytes from already captured packets

2011-12-09 Thread Rick Jones
I have some packet captures which were taken with a snaplen of 128 bytes, but I would like to convert that to one with a snaplen of say 66 bytes. The existing tcpdump/libpcap does not *seem* to do that - is there already a utility out there which can, or is this an "enhancement opportunity?"