Date: Tue, 30 Apr 2002 23:35:19 -0700 From: "Crist J. Clark" <crist.clark@attbi.com> To: Fernando Gleiser <fgleiser@cactus.fi.uba.ar> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: tcpdump(8) filtered by time Message-ID: <20020430233518.C57470@blossom.cjclark.org> In-Reply-To: <20020430165309.R85537-100000@localhost>; from fgleiser@cactus.fi.uba.ar on Tue, Apr 30, 2002 at 04:55:43PM -0300 References: <20020430110056.B55983@blossom.cjclark.org> <20020430165309.R85537-100000@localhost>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Apr 30, 2002 at 04:55:43PM -0300, Fernando Gleiser wrote:
> On Tue, 30 Apr 2002, Crist J. Clark wrote:
>
> > Slightly off-topic, but I'd like see if anyone has any ideas.
> >
> > I have a tcpdump(8) file that spans a few hours. I want to isolate
> > an hour somewhere in the middle and dump it to a new file. I can't
> > figure out how to do this.
>
> Doesn't tcpslice do something like that?
D'oh! Thanks. We all need to be reminded of the obvious sometimes.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020430233518.C57470>