Have you tried tethereal? What you're looking for could probably be done with:
tethereal -r <originalfile> -R <yourfilter> -w <newfile>
Ian
john g wrote:
can ethereal split a cap file based on a filter ?
i have a cap file (pretty huge) and i wanted to sort out relevant packets based on a filter and make a new cap file (which would be much smaller than the original one) and would be portable to manage.
thanks
