Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Value too large for defined data type

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Andrej van der Zee <andrejvanderzee@xxxxxxxxx>
Date: Wed, 5 Aug 2009 16:22:04 +0900

Hi,

cat big.cap | dumpcap -i- -w smaller.cap -b filesize:65536

(this will split up the big file into multiple smaller files of 64MB)

Hope this helps,

Oh yes :)
 
PS  IIRC, the reason for the wireshark tools not being able to handle these
large files is due to limitations in the gzip libraries...

Yes I have seen it before indeed!

Thanks alot,
Andrej


  • Follow-Ups:
    • Re: [Wireshark-users] Value too large for defined data type
      • From: Andrej van der Zee
  • References:
    • [Wireshark-users] Value too large for defined data type
      • From: Andrej van der Zee
    • Re: [Wireshark-users] Value too large for defined data type
      • From: Sake Blok
  • Prev by Date: Re: [Wireshark-users] Value too large for defined data type
  • Next by Date: [Wireshark-users] find local IP from cap-file
  • Previous by thread: Re: [Wireshark-users] Value too large for defined data type
  • Next by thread: Re: [Wireshark-users] Value too large for defined data type
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation