Ethereal-users: RE: [Ethereal-users] Capture Temp file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Andrena Lefdahl" <ALefdahl@xxxxxxxxxxxxxx>
Date: Mon, 8 May 2006 15:35:18 -0500
I'm trying to use editcap to break capture into smaller files. When I go
to the Windows command prompt and type:
Editcap -r c:capture\tr c:\capture\new 1-10000

Why do I get this error: 
"editcap is not recognized as and internal or external command?"

Thanks in Advance

-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Ulf Lamping
Sent: Friday, May 05, 2006 5:40 PM
To: Ethereal user support
Subject: Re: [Ethereal-users] Capture Temp file

Andrena Lefdahl wrote:
>
> I turned Ethereal on to capture packets on an interface. I stopped it 
> after 3 days. I did not specify a file name. I found that if a file 
> name isn't specified it is saved to a temp file. When I stopped the 
> capture my computer ran out of memory about halfway through loading 
> the data and closed the program. My question is this, is there anyway 
> to open that temp file and retrieve the data from that capture? Where 
> is the temp file located? Is that data capture I needed over those 
> three important days gone?
>
The file is still located in the temp folder which name you'll find 
under Help/About/Folders.

Ethereal crashes as it's running out of memory. You can split the 
capture file into smaller pieces using editcap 
(http://www.ethereal.com/docs/man-pages/editcap.1.html).

Next time you may try the "multiple files" capture option to split the 
resulting file already while capturing.

Regards, ULFL
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users


----- IRS CIRCULAR 230 NOTICE -----
Any tax advice expressed in this communication (including any attachments) is not intended to be used, and cannot be used, for the purpose of avoiding penalties imposed on the taxpayer by any governmental taxing authority or agency.  In addition, if any such tax advice is made available to any person or party other than the party to whom the advice was originally directed, then such advice, under IRS Circular 230, is to be considered as being delivered to support the promotion or marketing (by a person other than Eide Bailly LLP) of the transaction or matter discussed or referenced. Thus, each taxpayer should seek specific tax advice based on the taxpayer's particular circumstances from an independent tax advisor.

The information transmitted in this email and any attachments is intended only for the personal and confidential use of the  intended recipients.  This message may be or may contain privileged and confidential communications.  If you as the reader are not the intended recipient, you are hereby notified that you have received this communication in error and that any retention, review, use, dissemination, distribution or copying of this communication or the information contained is strictly prohibited.  If you have received this communication in error, please notify the sender immediately and delete the original message from your system.