Wireshark · Wireshark-users: Re: [Wireshark-users] edit a pcap capture to shorten file length?

[Guy Harris <guy@xxxxxxxxxxxx>]

Jake Peavy wrote:

> Yes, of course.  I assumed all this was immediately obvious.

I wouldn't assume that - people might not be aware that, for example, 
libpcap is a binary format (I've seen mail on various mailing lists from 
people trying to treat pcap files as text files), or that the file has a 
per-file header that will only be in the first of the split files (I 
think I've seen mail on mailing lists from people unaware of that), and 
if the files are being uploaded to Cisco tech support, the recipients 
might not be aware that the files have been split and need to be glued 
back together if they're not told.