This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

hello i have a simple question

i need to import many big pcap files were talking about 200GB+ and i would like to write a script to make wireshark import the separate 500Mb Files and merge them into 1 big file for analyzing? is this possible? and if yeah how ? or where can i find anything about the scripting functions?

thanks in advanced

asked 14 Jun '11, 02:16

g33n's gravatar image

g33n
1112
accept rate: 0%


There are several command line tools available to manipulate capture files, have a look at the User's Guide.

On the other hand, feeding Wireshark 500MB files, let alone 200GB files would crush it under memory constraints.

If you need to analyze data sets like this, CACE^H^H^H^HRiverbed Cascade Pilot Software is more for you.

permanent link

answered 14 Jun '11, 02:54

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

thank you for this quick anwser i will try the trial of cascade and if it works well ill buy it thanks alot

(14 Jun '11, 05:42) g33n
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×100
×31
×21
×3

question asked: 14 Jun '11, 02:16

question was seen: 2,984 times

last updated: 14 Jun '11, 09:57

p​o​w​e​r​e​d by O​S​Q​A