Wireshark-users: Re: [Wireshark-users] FW: Processing large capture file

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Mon, 17 Jul 2006 20:19:29 +0200

mitchellch wrote:

Hey,

I’ve got a rather large (~1.6GB) capture file that I need to analyze using WireShark. Unfortunately, when I try to open/load the capture file I get what appears to be an out-of-memory condition when the file is ~47% loaded. I was able to get some statistics using capinfos. Is there a way to further analyze this file?

I suppose that one option is to split the file during capture, are there any other options?

I am running Windows version 0.99.2pre1 on a Win XP Pro system (v5.1.2600 SP 2) with 2GB RAM (with a 3.8GB page file).

Any suggestions would be greatly appreciated.

See http://wiki.wireshark.org/KnownBugs/OutOfMemory

Regards, ULFL