and this is what I m using now, because tshark is so slow in spliting. The File Viewer will search your disk or CD-Rom and display some of the major file types such as pictures, sounds, music, videos, databases.

Using pcapfix I can fix the corrupt packets then SplitCap never crashes again. NetBEUI is a protocol for a small network that is used for file sharing and print services. SplitCap is super fast but when there is an error in some packet it crashes, while tshark only inform you about the error but continue : tshark: The file 'cap.pcap' appears to have been cut short in the middle of a packet.Īnd finally there is PcapSplitter which is super fast too but it need the winpcap driver, it doesn't work with the npcap driver in windows. This solution with tshark is so slow but sure. You can use wireshark which is a gui app or you can use tshark which is it's cli counterpart. Tr -d ' ' is for windows users, because tshark in windows output CR LF.

The FREE version opens over 200 types of files and includes the built-in file browser. The filename will be like that: stream number_time_source IP_port_destination IP_port.pcap Download the 1 universal file viewer for Windows, now with an all-new file browser and support for even more file formats. Inspired by here is a bash version: file=cap.pcap I found that for a lightweight client or client/server application using a simplistic, lightweight log viewer like log2console with NLogViewer target filled with additional parameters fields made it both easy to use/setup and customize, while being readable and easy to find the info I looked for.

Tcp file viewer