Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] How to cut big packet capture file to sevrealfiles

Date: Sun, 16 Aug 2009 10:32:53 -0400
Editcap would be the thing to use for that.
 
 
You may also want to (first) use capinfos to find out how many packets there are in the file. Then you can determine how many files you want and how many packets you want in each file.
 
 
 
Lori
 
 
----- Original Message -----
From: Boaz Galil
Sent: Sunday, August 16, 2009 9:42 AM
Subject: [Wireshark-users] How to cut big packet capture file to sevrealfiles

Hi,
 
 
I captured 500MB in one file.  I cant open this file on my PC (windows XP latest wireshark version 1.2.0). Is there any way to cut the file to sevreal equal  files (without opening the wireshark application) so I will be able to open the files?
 
 
Thanks in advance,

 

--
Boaz.


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe