Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Wireshark-users: [Wireshark-users] mutlpile traces in a single pcap file - how to split?

Date Index Thread Index Other Months All Mailing Lists

Date Prev Date Next Thread Prev Thread Next

From: Mahesh Thiagarajan <mahesh.thiagarajan@xxxxxxxxxx>
Date: Fri, 25 Sep 2009 12:01:05 +0530

Hi,

I am analyzing a PCAP file that contains mac layer to phy layer (the mac and cap exist on different processors and communicate over ethernet)traces of multiple machines.
The frames of both machines look alike, in terms of ethernet source , destination address etc.

Question:

1. How to now split the trace file into individual machine traces ?

Thanks,
Mahesh

Prev by Date: [Wireshark-users] Searching for a particular sequence in a packet
Next by Date: Re: [Wireshark-users] print number of packet based on filter in a file
Previous by thread: Re: [Wireshark-users] Searching for a particular sequence in a packet
Next by thread: Re: [Wireshark-users] OpenBSD enc0 capture from tcpdump failes to decode
Index(es):
- Date
- Thread