Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] Processing large capture file

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Mitchell Christensen" <mchristensen@xxxxxxxxxxxxxxxx>
Date: Mon, 17 Jul 2006 09:20:13 -0700

Hey,

 

I’ve got a rather large (~1.6GB) capture file that I need to analyze using WireShark.  Unfortunately, when I try to open/load the capture file I get what appears to be an out-of-memory condition when the file is ~47% loaded.  I was able to get some statistics using capinfos.  Is there a way to further analyze this file?

 

I suppose that one option is to split the file during capture, are there any other options?

 

I am running Windows version 0.99.2pre1 on a Win XP Pro system (v5.1.2600 SP 2) with 2GB RAM (with a 3.8GB page file).

 

Any suggestions would be greatly appreciated.

 

-Mitch

 

  • Prev by Date: [Wireshark-users] Problem Compiling 0.99.2pre
  • Next by Date: [Wireshark-users] FW: Processing large capture file
  • Previous by thread: Re: [Wireshark-users] Problem Compiling 0.99.2pre
  • Next by thread: [Wireshark-users] FW: Processing large capture file
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation