Ethereal-users: Re: [Ethereal-users] how to output only first and last packets of a libpcap file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Wed, 15 Mar 2006 07:40:10 +0100 (CET)
Hi,

How about shell scripting this:
use capinfos to get the number of packets in the file,
use editcap to get them from the capture into a intermediate files,
feed these intermediate files into tethereal, or merge them first before
feeding them the tethereal.

Thanx,
Jaap


On Tue, 14 Mar 2006, George P Nychis wrote:

> Hi,
>
> How can I output the first and last packets of a libpcap file with tethereal?
>
> Thanks!
> George
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>