If you have a particular window in time that you want to see, tcpslice will do what you want.
Do a quick Google search for "tcpslice" and you'll get several relevant links.
--J
> -----Original Message-----
> From: Morel Olivier FRF [mailto:Olivier.Morel@xxxxxxxxxx]
> Sent: Friday, November 22, 2002 6:28 AM
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] Fragment large capture files
>
>
> Is there a simple way to fragment a large capture file ?
>
> My problem is as follows :
> To catch up an elusive network problem, I let ethereal capture trafic
> whithout any capture filter, thus ending up with a VERY large
> file that
> Ethereal can hardly open (very slow, when it doesn't crash because of
> insufficient virtual memory).
>
> I would like to be able to extract a smaller part, based on
> time, such as :
> give me all frames between 10:25 and 10:35.
> if I detect the trouble I want to analyze at 10:30
>
> editcap allows for an extraction based on frame numbers, but
> I cannot get
> those numbers without opening Ethereal.
>
> Any idea ?
>
> Olivier R. Morel
> mailto:olivier.morel@xxxxxxxxxx
> 01 4291 9190
>
> **************************************************************
> ***********
>
> Ce message et toutes les pieces jointes (ci-apres le "message") sont
> confidentiels et etablis a l'intention exclusive de ses destinataires.
> Toute utilisation ou diffusion non autorisee est interdite.
> Tout message electronique est susceptible d'alteration.
> La SOCIETE GENERALE et ses filiales declinent toute
> responsabilite au titre de ce message s'il a ete altere,
> deforme ou falsifie.
>
> ********
>
> This message and any attachments (the "message") are confidential and
> intended solely for the addressees.
> Any unauthorised use or dissemination is prohibited.
> E-mails are susceptible to alteration.
> Neither SOCIETE GENERALE nor any of its subsidiaries or
> affiliates shall be liable for the message if altered,
> changed or falsified.
>
> **************************************************************
> ***********
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
