How does it work?

libnetdude allows the user to edit trace files in terms of trace areas, which are regions of packets in a trace file, defined by start- and end timestamps or size fractions. These areas can be conveniently iterated and modified, including insertion, modification, and deletion of packets. libnetdude takes care of managing the various areas, so that the user always sees a consistent view of the trace. libnetdude builds on the libpcapnav library in order to facilitate navigation in a trace file in time and space.