hello i have a simple question i need to import many big pcap files were talking about 200GB+ and i would like to write a script to make wireshark import the separate 500Mb Files and merge them into 1 big file for analyzing? is this possible? and if yeah how ? or where can i find anything about the scripting functions? thanks in advanced asked 14 Jun '11, 02:16 g33n |
One Answer:
There are several command line tools available to manipulate capture files, have a look at the User's Guide. On the other hand, feeding Wireshark 500MB files, let alone 200GB files would crush it under memory constraints. If you need to analyze data sets like this, CACE^H^H^H^HRiverbed Cascade Pilot Software is more for you. answered 14 Jun '11, 02:54 Jaap ♦ |
thank you for this quick anwser i will try the trial of cascade and if it works well ill buy it thanks alot