how to use editcap to split the btmon captured file

asked 2017-12-26 04:29:12 +0000

this post is marked as community wiki

This post is a wiki. Anyone with karma >750 is welcome to improve it.

btmon can capture the file in btsnoop format : btmon -w btsnoop_outfile

This file can be open in Wireshark as well as using btmon (btmon -r btsnoop_outfile)

This captured file is very lonf and need to split to browse quickly in wireshark. How to split the btsnoop_outfile using editcap or some other option, that i can open in btmon (btmon -r file)

editcap -F btsnoop -c 3000000 ip-118.btsnoop.log ?? Split using editcap is not opening in btmon command.

edit retag flag offensive close merge delete
add a comment