[Guy Harris <gharris@xxxxxxxxx>]

Lincoln Green wrote:
> I am trying to make a trace that someone else captured into a managable 
> length.

There are two ways to reduce the file size of a capture:

	1) delete uninteresting packets;

	2) throw away uninteresting data at the ends of packets.

You could also remove "uninteresting" from those, but the resulting 
capture file might not be usable as it might be missing critical data. 
(Note also that all the data in the interesting packets might be 
interesting, so 2) might not be possible if you keep "uninteresting" in 
the description.)

The other reply told how to do 1).  You can do 2) with editcap with the 
"-s" flag - it'll throw away data at the end of the packet that goes 
past the snapshot length.