Penetration Testing mailing list archives
Re: Split Kismet log file
From: Glenn Forbes Fleming Larratt <glratt () alumni rice edu>
Date: Sat, 23 Feb 2008 08:43:03 -0600 (CST)
tcpdump/windump will do this. % sudo tcpdump -r{300M.file} -w{smaller.file.stem} -C10 The -C argument (per the tcpdump man page): -C Before writing a raw packet to a savefile, check whether the file is currently larger than file_size and, if so, close the current savefile and open a new one. Savefiles after the first savefile will have the name specified with the -w flag, with a number after it, starting at 1 and continuing upward. The units of file_size are millions of bytes (1,000,000 bytes, not 1,048,576 bytes). So the command above took my 300M file and split it into ~10M fileswith the names {smaller.file.stem}, {smaller.file.stem}1, {smaller.file.stem}2, etc.
tcpdump threw me an error "tcpdump: Couldn't change to root uid=0 gid=0: Operation not permitted" when I tried to run it as a regular user, hence the sudo above. -g On Fri, 22 Feb 2008, Matheus Michels wrote:
Hey guys, Is there any way to split up a Kismet (tcpdump/libpcap format) log file in two or more pieces? I left Kismet sniffing in a high-traffic network and ended up with a huge 300 MB log file (about 600.000 packets), which freezes Wireshark if I try to dissect it. I cannot use a faster machine now, so I need to split this file in, at most, several 30-40 MB files. Thanks in advance. ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
-- Glenn Forbes Fleming Larratt NS2007: "ICE 1, Blue 6" glratt () alumni rice edu http://www.io.com/~glratt There are imaginary bugs to chase in heaven, and muddy blue is the most beautiful color in the universe. ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Split Kismet log file Matheus Michels (Feb 22)
- Re: Split Kismet log file Stephen Hall (Feb 23)
- Re: Split Kismet log file Glenn Forbes Fleming Larratt (Feb 23)
- Re: Split Kismet log file Phil Ames (Feb 23)
- Re: Split Kismet log file Devnull (Feb 23)
- Re: Split Kismet log file Chris Eagle (Feb 23)