Articles

Merging and splitting captures in CloudShark

1 min read

maxresdefault

Watch video on YouTube

When we first made CloudShark, we stuck to making the best and easiet to use packet capture analysis tool out there. As we made more and more improvements to CloudShark and its host of analysis tools, we’ve gotten many requests for the ability to manipulate the captures themselves - whether it be splitting them into smaller, more manageable sizes or performing a capture merge that can put two sets of packet data in order and remove duplicates.

CloudShark has the ability to two both of these things, greatly expanding the basics of what you can do with captures. This enables a number of new use cases, including:

  • Trimming down larger captures to look at a specific problem
  • Isolating a particular view as its own capture session
  • Capturing data about one incident from multiple locations

 export screenshot 2

Export captures to a new session based on filter rules

 merge screenshot

Merge captures from multiple sources or times into a single capture


Want articles like this delivered right to your inbox?

Sign up for our Newsletter

No spam, just good networking