capinfos and editcap

- [Instructor] When working with packet captures…there are a number of command line tools we can…use to manipulate the packet captures.…One is Capinfos, which provides statistics…about a capture file.…And there's also Editcap, and this works well…with Capinfos because it's able to split…a large trace file into multiple smaller files…along with a number of other editing functions.…I'm at the man page for Editcap at wireshark.org.…

And yes we can do a dash h and see all…the options, but you should become familiar…with all of the documentation Wireshark has to offer.…So as you can see, it tells us a little bit…about the switches that you can use…and how we can output these.…But let's take a look at an example.…I'm in the temporary folder that I created…under the c drive, and I have this capture Spotify.…Now here you can see how large that capture is.…

I'm in the command line interface and the first…thing I'll do is just run Capinfos and have it…tell me a little bit about the size of Spotify.…Now this is outputted to the screen and there…