Revision history [back]

You can use editcap to extract a timerange out of a capture and save that as a new file.
See: https://www.wireshark.org/docs/man-pages/editcap.html