Ethereal-users: Re: [Ethereal-users] Dealing with whomps of capture data

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "M.C. van den Bovenkamp" <marco@xxxxxxxxxxxxxxxxxxx>
Date: Mon, 27 Aug 2001 22:43:53 +0200
David Kuder wrote:

> Does anyone have a clue for the clueless in dealing with this sort
> of situation?  Maybe I need a different tool.  It is entirely
> possible that I have overlooked some function of ethereal that
> would help.

Either shorten the interval or use editcap to cut the files into smaller
chunks.  On my 512 meg RAM box Ethereal has no problems with 160 MB
capture files. Even with a 750 Mhz PIII doing the pushing it's not fast,
but it doesn't crash.

I have run 800MB files through 'tethereal -R <display filter>' on the
same box.

		Regards,

			Marco.