Ethereal-users: [Ethereal-users] Tethereal filtering - file to file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Tinga Shilo" <tingashilo@xxxxxxxxx>
Date: Wed, 21 Nov 2001 14:57:46 +0200
Hi,
Here is situation:
- On a remote machine I have run a tethereal capture to a file (call it large.cap)
- Ftp-ing large.cap back home is a problem, as the file is HUGE.
- My only access to the remote machine is ftp or telnet
This is what I want to do
- Telnet the remote machine
- Trim large.cap to small.cap
- Ftp small.cap to bring it home.
 
What are my options for trimming ?
I can use tethereal to read from one file, writing to the other.
- What filters should I use, capture-filters or read-filters ?
- The "-c" option works, but can I do something like "the last 100 packets of the file" ?
- Can I do something like "all the packets between two time stamps in the file" ?
 
I can write the C code for this, but was hoping quicker solutions exist.
 
Many TIAs