Wireshark

  • Riverbed Technology
  • WinPcap
SHARKFEST '13 - Wireshark Developer and User Conference - June 16-19, 2013 - UC Berkeley
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Pcap Ideal Size for Analysis

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Frank Bulk" <frnkblk@xxxxxxxxx>
Date: Mon, 22 Aug 2011 22:18:21 -0500

This may help: http://www.pcapr.net/xtractr

-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Zaki Akhmad
Sent: Monday, August 22, 2011 4:32 AM
To: Community support list for Wireshark
Subject: [Wireshark-users] Pcap Ideal Size for Analysis

Hi all,

Just got a pcap file sized 532 MB :|

I was wondering, how big is pcap ideal size to do some analysis? Just
when I opened this file, I need at least 5 minutes on my computer
(dual core, 3 GB memory) to open it.

Or maybe there are tips & tricks to capture and analyze big pcap file?

Thanks!
-- 
Zaki Akhmad
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
 
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe


  • References:
    • [Wireshark-users] Pcap Ideal Size for Analysis
      • From: Zaki Akhmad
  • Prev by Date: Re: [Wireshark-users] file format question
  • Next by Date: [Wireshark-users] So what use does the "-Q" flag have?
  • Previous by thread: Re: [Wireshark-users] Pcap Ideal Size for Analysis
  • Next by thread: [Wireshark-users] Issue Network Interface list: Tshark 1.4.6 and 1.6.1
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation