[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ethereal-users
Subject:    Re: [Ethereal-users] Can't open 7GB capture file -- have I Iost
From:       George Nychis <gnychis () cmu ! edu>
Date:       2006-03-26 18:56:00
Message-ID: 4426E3C0.2080608 () cmu ! edu
[Download RAW message or body]

Hi Jordan,

I would suggest you use some of Ethereals tools to make this process 
much easier.

If I were you, I'd first do something like:
tethereal -r etherXXXW19P6S -R "udp" -w udp-only.log

That way you have a new log that only has the UDP traffic as though 
thats how you originally did it ;)

Then your log file will be much smaller... if its still too big you can 
try using tethereal to do what you need... you can also split the file 
into multiple files.

Good luck,
George


Jordan Russell (Editor) wrote:
> Hi Everyone,
> 
> I'm the editor of www.ulivewhere.com and yesterday I interviewed a professor of
> American literature in Oran, Algeria.  Unfortunately, I forgot to use a UDP
> capture filter and so ethereal captured my VOIP call AND all the other traffic
> passing over my network -- including a Norton Ghost backup process! 
> 
> The result is that my precious satellite phone conversation (that cost me $80!)
> is buried within a 7GB ethereal capture file called " etherXXXXW19P6S " -- a file
> that I cannot open!  
> 
> When I try to open the file I always specify "UDP" in the "open capture filter",
> but even so, the process seems to run interminably (I ran it for 20 hours over
> last night), and I still cannot get the file to open or access the precious UDP
> packets lost inside.
> 
> I will add some technical information below, but if anyone knows any tricks I
> might try (splitting the file into more manageable chunks? using a different
> tool?), I would be extremely grateful to hear from you.
> 
> The "U Live Where?" project is all about contributing interesting content to the
> internet community, and I'm crossing my fingers that the internet community will
> bail me out of this terrible problem.
> 
> Thank you for reading this -- technical information follows.
> 
> Best,
> 
> Jordan Russell
> 
> 
> System Info:
> 1.2GB RAM
> 1600Mhz Pentium M)
> 56GB storage (14GB free)
> 
> I aborted the last attempt to open this file at:
> 20 hours
> 440MB Ethereal memory usage (adding 4k to memory usage every 2 seconds)
> Commit charge of 662MB / 1900 MB 
> 
> 
> 
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@ethereal.com
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 
_______________________________________________
Ethereal-users mailing list
Ethereal-users@ethereal.com
http://www.ethereal.com/mailman/listinfo/ethereal-users
[prev in list] [next in list] [prev in thread] [next in thread]