First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

splitting pcap file with editcap

I'm looking for information on the file format of the saved split pcap files saved by EditCap. They're saved with a .pcap file extension, but don''t seem to contain the GlobalHeader information in the same format as the original. Is there a different format used before the Record Headers?

EricM's avatar
1
EricM
asked 2020-12-02 09:24:51 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

1

From the editcap docs:

Output File(s):
...
  -F <capture type>    set the output file type; default is pcapng.
                       An empty "-F" option will list the file types.
grahamb's avatar
23.8k
grahamb
answered 2020-12-02 10:59:47 +0000, updated 2020-12-02 11:04:13 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Aha .. thanks for that. I'll head back to the playroom and see if I can make progress..

EricM's avatar EricM (2020-12-02 11:23:56 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer