Penetration Testing mailing list archives
Re: Split Kismet log file
From: Phil Ames <pentest () una-cerveza com>
Date: Sat, 23 Feb 2008 09:43:07 -0500
You can use tcpdump's -C option to split large packet captures: -C Before writing a raw packet to a savefile, check whether the file is currently larger than file_size and, if so, close the current savefile and open a new one. Savefiles after the first savefile will have the name specified with the -w flag, with a number after it, starting at 1 and continuing upward. The units of file_size are millions of bytes (1,000,000 bytes, not 1,048,576 bytes). so: tcpdump -r big.pcap -w little.pcap -C 35 would give you little.pcap, little.pcap1, little.pcap2, and so on. -Phil Matheus Michels wrote:
Hey guys,Is there any way to split up a Kismet (tcpdump/libpcap format) log file in two or more pieces? I left Kismet sniffing in a high-traffic network and ended up with a huge 300 MB log file (about 600.000 packets), which freezes Wireshark if I try to dissect it. I cannot use a faster machine now, so I need to split this file in, at most, several 30-40 MB files.Thanks in advance. ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Split Kismet log file Matheus Michels (Feb 22)
- Re: Split Kismet log file Stephen Hall (Feb 23)
- Re: Split Kismet log file Glenn Forbes Fleming Larratt (Feb 23)
- Re: Split Kismet log file Phil Ames (Feb 23)
- Re: Split Kismet log file Devnull (Feb 23)
- Re: Split Kismet log file Chris Eagle (Feb 23)