Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 12707] New: Splitting captures by uniform time intervals u

Date: Wed, 03 Aug 2016 18:09:52 +0000
Bug ID 12707
Summary Splitting captures by uniform time intervals using "editcap -i <seconds per file>" doesn't work.
Product Wireshark
Version unspecified
Hardware All
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component Extras
Assignee [email protected]
Reporter [email protected]

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
Splitting captures by uniform time intervals using `editcap -i <seconds per
file>` doesn't work.  For example, attempting to split a large capture file
into multiple capture files of 10 minute duration using the following command
only produces a single output file containing all packets:

    editcap -F pcap -i 600 infile.pcap outfile.pcap

Either my syntax or understanding about what the `-i <seconds per file>` option
is supposed to do is wrong, in which case the editcap man page could be
improved, or there appears to be a bug with the feature.


You are receiving this mail because:
  • You are watching all bug changes.