On Wed, Nov 26, 2003 at 07:55:33PM -0800, john g wrote: > can ethereal split a cap file based on a filter ?
Yes - filter the display, and then do "File->Save As" and select "Save only packets currently being displayed". Tethereal can do so as well, as per Ian Schorr's mail.
