I want to know how many files .pcap do you have? 10000?
What is the exact infomation you want to extract?
I'm doing something similar but I need the details to help you.
2008/3/28, ccie <ccie3366@xxxxxxxxx>:
All:
I have been searching around to no success....
I have wireshark capturing 'all' packets continuosly for 10000 files (buffer ring file) of 16MB each.
Now I need to find a way to extract certain packets based on a display filter and output to another set of file.
is it possible to do this on the command-line (Windows DOS prompt) with filename wild-card?
Thx,
Eddy Chandra
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users
