This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

is wireshark scriptable?

0

hello i have a simple question

i need to import many big pcap files were talking about 200GB+ and i would like to write a script to make wireshark import the separate 500Mb Files and merge them into 1 big file for analyzing? is this possible? and if yeah how ? or where can i find anything about the scripting functions?

thanks in advanced

asked 14 Jun '11, 02:16

g33n's gravatar image

g33n
1112
accept rate: 0%


One Answer:

2

There are several command line tools available to manipulate capture files, have a look at the User's Guide.

On the other hand, feeding Wireshark 500MB files, let alone 200GB files would crush it under memory constraints.

If you need to analyze data sets like this, CACE^H^H^H^HRiverbed Cascade Pilot Software is more for you.

answered 14 Jun '11, 02:54

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

thank you for this quick anwser i will try the trial of cascade and if it works well ill buy it thanks alot

(14 Jun '11, 05:42) g33n