I think you would be better off realtime parsing this and shoving it into a db. That would eliminate the 2GB limit and allow you to run filtering and more advanced options (in Wireshark) from your favorite desktop after a more selective query on the db.
________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex Lee Sent: Friday, May 04, 2007 3:18 AM To: wireshark-users@wireshark.org Subject: [Wireshark-users] Wireshark and 2GB capture files Hi - I was just wondering if there was support for trace files larger than 2GB on x86 machines (CentOS 5) by any chance? And if so, how do you go about getting this to work? 2.6.18-8.1.3.el5 libpcap-devel-0.9.4-8.1 libpcap-0.9.4-8.1 wireshark-0.99.5 sorry, I'm new, so I apologize if I didn't provide sufficient information. Alex
_______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
