Re: Recovering captured traffic after a crash on Win2k

Jaap Keuter <[email protected]> Thu, 27 Jul 2006 18:17:52 +0200 (CEST)
Newsgroups gmane.network.ethereal.user
Message-ID <[email protected]>
Hi,

You can use editcap to clip the capture file in parts.

Thanx,
Jaap

On Thu, 15 Jun 2006, Edward Szurek wrote:

> Hello all,
>
> I am running Ethereal 0.99.0 and WinPcap 3.1 on a Windows 2000 SP4 box. I captured all the traffic going to my mail server (exchange) for one week and after I ended the capture Ethereal crashed while the capture file was loading. I found it in my TEMP directory and wish to analyze all the information in it. It is called 'etherXXXXLY7TAT' and has no filename extention, the size is 1.7GB. Can someone please tell me a method to work with this file? Thank you in advance for any help.
>
> Ed Szurek
>