LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 07-23-2004, 05:15 PM   #1
captgoodnight
Member
 
Registered: Jan 2002
Distribution: suse 7.2
Posts: 56

Rep: Reputation: 15
splitting pcap dump files


Quick question, let's say you have 150M pcap dump file. What console tool would you
use to split it up in half?

thanks in advance,
cg
 
Old 07-24-2004, 06:21 AM   #2
jschiwal
Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 654Reputation: 654Reputation: 654Reputation: 654Reputation: 654Reputation: 654
If you want to split a file into pieces, the command you want to use is called, guess what, split. You could use the option -b 75m for two 75 Mb files, However you may want to use the -l lines option so you don't split lines between files. Using the 'wc -l' command could tell you how many lines are in the log file.


Last edited by jschiwal; 07-24-2004 at 06:25 AM.
 
Old 07-25-2004, 02:30 AM   #3
captgoodnight
Member
 
Registered: Jan 2002
Distribution: suse 7.2
Posts: 56

Original Poster
Rep: Reputation: 15
Hehe, that's funny! Here I am a LPI graduate, and you push me into split and wc! lol
The tests test this, lol, past funny. Anyways, no, split doesn't work, either with a common
pcap file or one with wireless headers. Go ahead, run kismet and do a split on a pcap dump,
then open it up with tethereal and let me know what ya get, file 1 is good, 2 is bunk; same results
with wired frames. That's my network though, maybe your's different?

Any other idears?

bests, thanks again for the laugh, I remember studying my butt off, only to pass with colors, split, wc - giggle...
what's next, fmt, hahahahaha lol. Joking. Had to be there.
cg
 
Old 07-26-2004, 08:12 PM   #4
jschiwal
Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 654Reputation: 654Reputation: 654Reputation: 654Reputation: 654Reputation: 654
I thought that you wanted to break up the file into pieces to reassemble later with cat.

Look at the tcpslice program.

Last edited by jschiwal; 07-26-2004 at 08:26 PM.
 
Old 07-27-2004, 12:12 AM   #5
captgoodnight
Member
 
Registered: Jan 2002
Distribution: suse 7.2
Posts: 56

Original Poster
Rep: Reputation: 15
Thanks found this too.

http://freshmeat.net/projects/pcapmerge/

It was right under my nose the entire time Kinda like forgetting
to quote a variable again...

Sounding off, thanks again,
cg
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
splitting files columnwise manjushp Programming 3 08-25-2005 04:49 PM
Pcap Files OriDagan Linux - Networking 0 07-15-2005 04:20 AM
splitting vob files ssfrstlstnm Linux - Software 2 07-10-2005 03:55 PM
OpenOffice files splitting bezaleel Linux - Software 0 07-22-2004 03:39 PM
Splitting AVI files gonniff Linux - Software 4 09-19-2003 09:49 AM


All times are GMT -5. The time now is 10:20 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration