Wireshark · Wireshark-users: Re: [Wireshark-users] Wireshark and 2GB capture files

[<juan.wortley@xxxxxxx>]

Hi Alex,

 

I never used CentOS, however independently of the OS it is recommended not to grow up to much the files to keep them manageable. Otherwise it takes too much to process them.

Using multiple files when doing the capture and limiting them to lets say 100MB (or less) you can handle that more easily.

In case you need to see all together wireshark can reassemble the files automatically opening subsequent files together.

 

Br

Juan

 

---

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of ext Alex Lee
Sent: Viernes, 04 de Mayo de 2007 05:18 a.m.
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] Wireshark and 2GB capture files

Hi –

 

I was just wondering if there was support for trace files larger than 2GB on x86 machines (CentOS 5) by any chance? And if so, how do you go about getting this to work?

 

2.6.18-8.1.3.el5

libpcap-devel-0.9.4-8.1

libpcap-0.9.4-8.1

wireshark-0.99.5

 

sorry, I’m new, so I apologize if I didn’t provide sufficient information.

 

Alex