Re: Tshark Filter to create new smaller PCAP

[Stephen Fisher <steve () stephen-fisher com>]

On Tue, Nov 29, 2011 at 01:56:13PM -0800, George Vandelet wrote:

> I have a PCAP file that is over 100M.  I wish to open it but my GUI 
> version of Wireshark 32.0.0_ofc14 but it crashes each time I try to 
> open it. 

I'm not sure what version of Wireshark that corresponds to, but if it's 
not 1.6 or at least 1.4, you may need to upgrade to get better 
performance and that *might* let it work without crashing.  That is 
assuming it is crashing due to being out of memory and not a bug.  See 
http://wiki.wireshark.org/KnownBugs/OutOfMemory

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe