Wireshark mailing list archives
Splitting up large .pcap file results in inconsistent times
From: Yida Gao <yidapb () gmail com>
Date: Wed, 28 Jul 2010 12:13:09 -0400
Hi Everyone, So I have a large simulation that is about 600 seconds long. I split up the large .pcap file using editcap: editcap -i 100 Fulltest-1-0.pcap 100seconds.pcap However, when I open each of the files produced (6 of them), they all start with time 0, and end at around time 99. Why aren't the files continuous with the time? I would assume the last .pcap file would go from 500 seconds to 600 seconds. How can I make the files continuous?? My ultimate goal is just to graph the through put throughout the entire simulation. Does anyone know of a good awk script to pull throughput of a certain node? I appreciate the help.
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Splitting up large .pcap file results in inconsistent times Yida Gao (Jul 28)
- Re: Splitting up large .pcap file results in inconsistent times Guy Harris (Jul 28)