.\" WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
.\" MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
.\"
-.TH TCPSLICE 1 "01 January 2022"
+.TH TCPSLICE 1 "22 March 2024"
.SH NAME
tcpslice \- extract pieces of and/or merge together pcap files
.SH SYNOPSIS
.SH DESCRIPTION
.LP
.I Tcpslice
-is a program for extracting portions of packet-trace files generated using
+is a program for extracting portions of
+.B .pcap
+(but not
+.BR .pcapng )
+files produced using
.BR tcpdump (1)'s
.B \-w
-flag.
+flag or many other programs.
It can also be used to merge together several such files, as discussed
below.
.LP
.LP
Times may also be specified in terms of years (y), months (m), days (d),
hours (h), minutes (m), seconds (s), and microseconds(u). For example,
-the Unix timestamp 654321098.7654 discussed above could also be expressed
+the Unix timestamp
+.B 654321098.7654
+discussed above could also be expressed
as
.BR 1990y9m25d20h51m38s765400u .
2 or 4 digit years may be used; 2 digits can specify years from 1970 to
to rummage through its input files.
.LP
.I tcpslice
+cannot process an otherwise valid input file that contains fewer than two
+packets.
+.LP
+.I tcpslice
refuses to write to its output if it is a terminal
(as indicated by
.BR isatty (3)).