I am working in Wireshark book edition 2. I need help with 8.1 lab 42.
lab 42: Split a File and Work with Filtered File Sets.
- open command prompt. ( I got that part)
- navigate to your trace file.... Ok here I had to download a file from the school http-download-c.pcapng. Once its downloaded we have to navigate to the trace file and when I do and use it in the command prompt, I can only open it with
Program Files \Wireshark. - we are going to split this file based on the packet count. Type
capinfos http-download-c.pcapng. This where I used theProgram Files\Wiresharkto open file. - Type
editcap -c 20000 http-download-c.pcapng http-download-c20000.pcapngwhen I press enter I get a prompt that I do not have access.
My professor asked me to try to run editcap command in a different location like downloads or documents... I do not know how to do this. can anyone help me
By default, the ancillary programs in the Wireshark suite such as capinfos and editcap are NOT on the Windows path, so to use them from a command prompt you MUST either provide the full path to the program, e.g.
C:\Program Files\Wireshark\editcap.exeor add the Wireshark directory to your path via the multiple methods available to do that.