Working with large trace files

When using a protocol analyzer you will eventually come across a scenario where you have a large trace file. My definition of a large trace file is anything over 1 GB. There are many products out there that are specifically designed products to process, report and help analyze large trace files. Unfortunately there are ties where you are in the field, can’t get access to your fancy tools or just justify purchasing these other products since you don’t run into this enough. In the video below, I will cover the most common techniques to work with large trace files. Specifically I will cover packet slicing with editcap, using a ....

read the full article for free at https://www.networkcomputing.com/author/35783423

when its published ... https://www.youtube.com/watch?v=tx0hAryYomU