Re: [tlug] strange nfs crashes

[Edward Middleton <edward.middleton@example.com>]

On 07/07/10 20:36, Romeo Theriault wrote:
> On Wed, Jul 7, 2010 at 20:28, Romeo Theriault <romeo.theriault@example.com
> <mailto:romeo.theriault@example.com>> wrote:
> 
>         Now there is my problem: how do I analyse it?
> 
>     Maybe you could use 'split' to break it into smaller chunks?  Any
>     reason you need a 10GB capture file though?
> 
> Sorry, just re-read your message and think I know understand why you
> have 10GB files. You were waiting for the app to crash so you could
> analyze why that happened. Maybe you can still use split to split the
> file though.

pcap doesn't have a fixed record length so you have to reread in order
to split it[1].  You could also use tcpdump -F to analyze it.

Edward

1.
http://stackoverflow.com/questions/1245176/how-can-i-use-the-input-logs-pcapbinary-with-map-rreduce-hadoop