Sunday, October 2, 2016

EDITCAP - wireshark bundled CLI tool

Useful tool to chunk a large unwieldy packet capture file. Comes bundled with Wireshark.

"c:/program files (x86)/wireshark/editcap.exe" -c 20000 dropped_packets_capture.pcapng split.pcapng



Posted by at
Labels: ,

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)