I'm trying to figure out a way to use a console program to filter through
pcap files. I want to take a pcap dump of wireless activity and filter only
by the access point (BSSID). I can open the file in ethereal and filter it
that way, but is there a way to use tcpdump -r or tcpslice to do the same
thing? "tcpdump -r file -e | grep bssid" shows me the human readable
output, but i'd like to get this into another pcap file if possible. if
not, is there another tool that can achieve this? I'd like to use a console
program because ethereal craps out on large files, and i'd like to use
scripting to automate this
Thanks for any suggestions!
|