Wireshark · Wireshark-users: Re: [Wireshark-users] How to cut big packet capture file to sevrealfiles

["Lori" <Verdandi@xxxxxxxxxxxxxxxxxx>]

Editcap would be the thing to use for that.

 

http://www.wireshark.org/docs/man-pages/editcap.html

 

You may also want to (first) use capinfos to find out how many packets there are in the file. Then you can determine how many files you want and how many packets you want in each file.

 

http://www.wireshark.org/docs/man-pages/capinfos.html

 

 

Lori

 

 

----- Original Message -----

From: Boaz Galil

To: Community support list for Wireshark

Sent: Sunday, August 16, 2009 9:42 AM

Subject: [Wireshark-users] How to cut big packet capture file to sevrealfiles

Hi,

 

 

I captured 500MB in one file.  I cant open this file on my PC (windows XP latest wireshark version 1.2.0). Is there any way to cut the file to sevreal equal  files (without opening the wireshark application) so I will be able to open the files?

 

 

Thanks in advance,

 

--
Boaz.

---

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe