Ethereal-users: Re: [Ethereal-users] split cap file ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Ian Schorr <spamcontrol2@xxxxxxxxxxx>
Date: Thu, 27 Nov 2003 01:44:22 -0500
Read recent messages.
Have you tried tethereal? What you're looking for could probably be done with: 

tethereal -r <originalfile> -R <yourfilter> -w <newfile>

Ian

john g wrote:


can ethereal split a cap file based on a filter ?

i have a cap file (pretty huge) and i wanted to sort
out relevant packets based on a filter and make a new
cap file (which would be much smaller than the
original one) and would be portable to manage.

thanks