Splitting up large .pcap file results in inconsistent times

[Yida Gao <yidapb () gmail com>]

Hi Everyone,

So I have a large simulation that is about 600 seconds long.
I split up the large .pcap file using editcap:

editcap -i 100 Fulltest-1-0.pcap  100seconds.pcap

However, when I open each of the files produced (6 of them), they all start
with time 0, and end at around time 99. Why aren't the files continuous with
the time? I would assume the last .pcap file would go from 500 seconds to
600 seconds.

How can I make the files continuous??

My ultimate goal is just to graph the through put throughout the entire
simulation.  Does anyone know of a good awk script to pull throughput of a
certain node?

I appreciate the help.

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe