Ethereal-users: [Ethereal-users] Fragment large capture files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Morel Olivier FRF <Olivier.Morel@xxxxxxxxxx>
Date: Fri, 22 Nov 2002 13:28:08 +0100
Is there a simple way to fragment a large capture file ? 

My problem is as follows : 
To catch up an elusive network problem, I let ethereal capture trafic
whithout any capture filter, thus ending up with a VERY large file that
Ethereal can hardly open (very slow, when it doesn't crash because of
insufficient virtual memory). 

I would like to be able to extract a smaller part, based on time, such as : 
   give me all frames between 10:25 and 10:35. 
if I detect the trouble I want to analyze at 10:30
 
editcap allows for an extraction based on frame numbers, but I cannot get
those numbers without opening Ethereal.  

Any idea ? 

Olivier R. Morel
mailto:olivier.morel@xxxxxxxxxx
01 4291 9190

*************************************************************************

Ce message et toutes les pieces jointes (ci-apres le "message") sont
confidentiels et etablis a l'intention exclusive de ses destinataires.
Toute utilisation ou diffusion non autorisee est interdite. 
Tout message electronique est susceptible d'alteration. 
La SOCIETE GENERALE et ses filiales declinent toute responsabilite au titre de ce message s'il a ete altere, deforme ou falsifie.

				********

This message and any attachments (the "message") are confidential and
intended solely for the addressees.
Any unauthorised use or dissemination is prohibited. 
E-mails are susceptible to alteration.   
Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified. 

*************************************************************************