[pcap-ng-format] Validating a multi-session implementation

[Jasper Bongertz]

Thursday, April 14, 2016, 5:21:45 PM, Emery Hemingway wrote:

> My problem now is that my preferred viewer would be
> wireshark, but this does not support multiple sessions.

> Is there an alternative to check my multisession files 
> against? Is there a utility to split multisession files?

If you mean with "multisession" that your pcapng file has multiple
sections (starting with an SHB each) you can use TraceWrangler to
split them: https://www.tracewrangler.com

Use the "Add" Button in the task list (lower left corner) and select
"Separate multiple PCAPng sections".

Cheers,
Jasper
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3283 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://www.winpcap.org/pipermail/pcap-ng-format/attachments/20160414/0037d1ce/attachment.bin>