You can use the editcap utility from the Ethereal sniffer install (www.ethereal.net) to chop up a large capture.
Editcap -r infile outfile start_packet_number-end_packet_number This is nice, 'cos you don't chop the file in mid record. Rob ----- > From: Stefan Piger > > Hey all, > I have got a pcap file of more than 2GB size that I want to > analyze using ntop. Is there a way to get ntop to read it? > Momentarily, I only get an error like "**FATAL_ERROR** > pacp_open_offline(): '/path/to/file': Files too large'". > > best regards, Stefan Piger > > -- The information contained in this e-mail message is intended only for the use of the person or entity to whom it is addressed and may contain information that is CONFIDENTIAL and may be exempt from disclosure under applicable laws. If you read this message and are not the addressee you are notified that use, dissemination, distribution, or reproduction of this message is prohibited. If you have received this message in error, please notify us immediately and delete the original message. You should scan this message and any attached files for viruses. Axon accepts no liability for any loss caused either directly or indirectly by a virus arising from the use of this message or any attached file. _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
