Ethereal-users: Re: [Ethereal-users] how to output only first and last packets of a libpcap file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Wed, 15 Mar 2006 07:40:10 +0100 (CET)
Hi,

How about shell scripting this:
use capinfos to get the number of packets in the file,
use editcap to get them from the capture into a intermediate files,
feed these intermediate files into tethereal, or merge them first before
feeding them the tethereal.

Thanx,
Jaap


On Tue, 14 Mar 2006, George P Nychis wrote:

> Hi,
>
> How can I output the first and last packets of a libpcap file with tethereal?
>
> Thanks!
> George
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>