I'm trying to split a huge capture into 1 hour files like this:
"C:\Program Files\Wireshark\editcap.exe" -v -r -i 3600 myhugecapture.pcapng splits
Where "myhugecapture.pcapng" is the input and "splits" is the name that I want for the outputs.
All I get is this message:
File mycapturefile.pcapng is a Wireshark/... - pcapng capture file.
And a 200 bytes "splits" output file with some garbled content:
È M<+ ÿÿÿÿÿÿÿÿ 6 Intel(R) Xeon(R) Gold 6242 CPU @ 2.80GHz (with SSE4.2) . 64-bit Windows Server 2016 (1607), build 14393 2 Dumpcap (Wireshark) 3.4.9 (v3.4.9-0-g365e236f5efe) È