Download

SplitCap is a free tool designed to split capture files (PCAP files) into smaller files based on a criterion, such as IP address, 5-tuple or MAC address. The criteria available for splitting/grouping are:

BSSID : Packets grouped based on WLAN BSSID
Flow : Unidirectional traffic for each 5-tuple (transport protocol, IP addresses and port numbers) is grouped together.
Host : Traffic grouped to one file per IP address (source and destination). Most packets will end up in two files.
Host Pair : Traffic grouped based on IP pairs communicating.
MAC address : Traffic grouped to one file per MAC address. Most packets will end up in two files.
Session : Packets for each session (bi-directional flow) are grouped together.
Time : Split based on time.
Packets Count : Split based on packet count.