wireshark_editcap_split
Split a packet capture file into smaller files by number of packets or elapsed time, enabling easier handling of large captures.
Instructions
Split a capture into multiple files using editcap.
Args: input_file: Source capture file output_prefix: Output filename prefix or base path packets_per_file: Split after this many packets per file seconds_per_file: Split after this many seconds per file
Returns: Success message or JSON error
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| input_file | Yes | ||
| output_prefix | Yes | ||
| packets_per_file | No | ||
| seconds_per_file | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |