Could split the file into smaller components with this. https://www.wireshark.org/docs/man-pages/editcap.html
Check this out too. http://www.netresec.com/?page=SplitCap __________________________________ Charles Boening Network Manager 800-858-2399 | Office [email protected]<mailto:[email protected]> www.cot.net<http://www.cot.net/> | Find us on Facebook<https://www.facebook.com/pages/Cal-Ore/205066716227707> __________________________________ Cal-Ore | Real. Local. Trusted. Professional. From: Af [mailto:[email protected]] On Behalf Of That One Guy Sent: Wednesday, January 21, 2015 10:51 AM To: [email protected] Subject: Re: [AFMUG] Windows based pcap viewer for large files 8gb and 4 xeon cores On Wed, Jan 21, 2015 at 12:33 PM, Josh Luthman <[email protected]<mailto:[email protected]>> wrote: How much ram do you have? Do a filter and save that? Josh Luthman Office: 937-552-2340<tel:937-552-2340> Direct: 937-552-2343<tel:937-552-2343> 1100 Wayne St Suite 1337 Troy, OH 45373 On Jan 21, 2015 1:32 PM, "That One Guy" <[email protected]<mailto:[email protected]>> wrote: Anybody know a good, free viewer for large pcaps that runs in windows? I have a 16gb file in wireshark right now and everythign takes 10 minutes to complete -- All parts should go together without forcing. You must remember that the parts you are reassembling were disassembled by you. Therefore, if you can't get them together again, there must be a reason. By all means, do not use a hammer. -- IBM maintenance manual, 1925 -- All parts should go together without forcing. You must remember that the parts you are reassembling were disassembled by you. Therefore, if you can't get them together again, there must be a reason. By all means, do not use a hammer. -- IBM maintenance manual, 1925
