Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Breaking up a capture file

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Mark Grigsby <mark@xxxxxxxxxx>
Date: Thu, 2 Aug 2007 14:45:50 -0700

look for a utility called splitpcap.py  it is a python utility that works very 
well..  I recently had to split a pcp file into manageable parts to process 
through a utility called chaosreader..  a little editing of the splitpcap 
utility gave me 50Mb chunks of pcap files that worked vey nicely..

drop me a note off line if you can't find it, and I will send you a copy...



On Thursday 02 August 2007 01:56 pm, Andrew Chalk wrote:
> I have some huge capture files that are to large to load into Ethereal
> (v0.10.12).
>
>
> Is there a utility to break up a file into chunks of a specified size so
> that they are always broken at a capture record boundary?
>
>
> Many thanks.
>
>
>
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users

-- 
Mark Grigsby
Network Operations Manager
PCI  (Preferred Connections Inc. NW)
P.O. Box E Lakeside, OR. 97449
Voice:	800-787-3806
	(541) 759-3126
Fax: 1-541-759-3214


  • References:
    • [Wireshark-users] Breaking up a capture file
      • From: Andrew Chalk
  • Prev by Date: [Wireshark-users] Breaking up a capture file
  • Next by Date: Re: [Wireshark-users] Breaking up a capture file
  • Previous by thread: [Wireshark-users] Breaking up a capture file
  • Next by thread: Re: [Wireshark-users] Breaking up a capture file
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation