Ethereal-users: Re: [Ethereal-users] Filter Question(Like we've never seen one ofthese...)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Thu, 4 Dec 2003 06:30:14 +1100
tethereal -r capture.cap -w new-capture.cap -R "frame.number>4000000"

----- Original Message ----- 
From: "Ronald Prague"
Sent: Wednesday, November 26, 2003 4:42 AM
Subject: [Ethereal-users] Filter Question(Like we've never seen one
ofthese...)


> I've got a very very large capture file(800MB), its so big I can't
> convert it to a text dump, and ethereal can't open it without crashing.
>
> I'd like to know if you can run a tethereal filter against it to just
> get say all frames > 4000000 or all frames within a certain time window?
>
> Ron
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users