Lisa Bock demonstrates capinfos, which provides statistics about a capture file along with editcap, which can split a large trace file into multiple smaller files based on time or other options.
- [Instructor] When working with packet captures…there are a number of command line tools we can…use to manipulate the packet captures.…One is Capinfos, which provides statistics…about a capture file.…And there's also Editcap, and this works well…with Capinfos because it's able to split…a large trace file into multiple smaller files…along with a number of other editing functions.…I'm at the man page for Editcap at wireshark.org.…
And yes we can do a dash h and see all…the options, but you should become familiar…with all of the documentation Wireshark has to offer.…So as you can see, it tells us a little bit…about the switches that you can use…and how we can output these.…But let's take a look at an example.…I'm in the temporary folder that I created…under the c drive, and I have this capture Spotify.…Now here you can see how large that capture is.…
I'm in the command line interface and the first…thing I'll do is just run Capinfos and have it…tell me a little bit about the size of Spotify.…Now this is outputted to the screen and there…
- Tapping into the network
- Baselining the network
- Troubleshooting to discover the cause of a slow network
- Merging traffic
- Sanitizing packet captures
- Capture engines
- Optimizing packet captures
- Basic and advanced IO graphs
- TCP stream graphs
Skill Level Intermediate
Enhance your skills1m 5s
1. Tapping into the Stream
2. Solving Network Problems
3. Capture Engines and Wi-Fi
4. Command Line Capture
5. IO and Stream Graphs
What's next?1m 13s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.