Date: Tue, 30 Apr 2002 23:35:19 -0700 From: "Crist J. Clark" <crist.clark@attbi.com> To: Fernando Gleiser <fgleiser@cactus.fi.uba.ar> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: tcpdump(8) filtered by time Message-ID: <20020430233518.C57470@blossom.cjclark.org> In-Reply-To: <20020430165309.R85537-100000@localhost>; from fgleiser@cactus.fi.uba.ar on Tue, Apr 30, 2002 at 04:55:43PM -0300 References: <20020430110056.B55983@blossom.cjclark.org> <20020430165309.R85537-100000@localhost>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Apr 30, 2002 at 04:55:43PM -0300, Fernando Gleiser wrote: > On Tue, 30 Apr 2002, Crist J. Clark wrote: > > > Slightly off-topic, but I'd like see if anyone has any ideas. > > > > I have a tcpdump(8) file that spans a few hours. I want to isolate > > an hour somewhere in the middle and dump it to a new file. I can't > > figure out how to do this. > > Doesn't tcpslice do something like that? D'oh! Thanks. We all need to be reminded of the obvious sometimes. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020430233518.C57470>