0 Replies Latest reply on Apr 12, 2016 10:48 AM by Christopher Sather

    How to remove duplicate lines from CE7 Netlog

    Christopher Sather

      If you have captured a netlog from a CE7 device, you have noticed duplicate trace entries for every packet.  Use the Wireshark export feature and the editcap.exe command line tool to remove them.

       

      1. Open the original capure file in Wireshark (i.e. netlog0.cap)
      2. Export all the packets to a new capture file (netlog0_exp.cap)
      3. In the \Program Files\Wireshark\ folder, there is a command line utility called editcap.exe
        1. editcap -n netlog0_exp.cap netlog0_nodupes.cap
      4. Open the netlog0_nodupes.cap file in wireshark and all the duplicate lines are gone.
        Raw netlog file with 4 lines duplicatedSame netlog with duplicates removed