{"id":6900,"date":"2014-11-04T17:03:33","date_gmt":"2014-11-04T08:03:33","guid":{"rendered":"http:\/\/apollo89.com\/wordpress\/?p=6900"},"modified":"2025-01-08T23:53:11","modified_gmt":"2025-01-08T14:53:11","slug":"packet-%eb%b6%84%ed%95%a0%ea%b3%bc-%ed%95%a9%ec%b9%98%ea%b8%b0","status":"publish","type":"post","link":"https:\/\/apollo89.com\/wordpress\/?p=6900","title":{"rendered":"Wireshark pcap \ud30c\uc77c \ubd84\ud560"},"content":{"rendered":"

 
\nWireshark pcap \ud30c\uc77c \ubd84\ud560<\/p>\n

\uc774\ubc88 \ud575\ub354 \ud328\ud0b7\uc5d0\uc11c \uc7ac\uc77c \uace0\uc0dd\ud588\ub358 \ubd80\ubd84\uc740..
\n\uc2dc\uac04\uacfc\uc758 \uc2f8\uc6c0\uc774\uc600\ub2e4..
\n\uc81c\uacf5\ub41c pcap \ud30c\uc77c\uc758 \ud06c\uae30\ub294 \uc57d 250M \uc815\ub3c4..
\n\ud558\uc9c0\ub9cc \uc774 \ud30c\uc77c\uc744 \uc77d\uc5b4\uc11c \ud544\ud130\uac78\uace0 TCP follow \ub4f1 \ubd84\uc11d\ud558\ub294\ub370 \ub85c\ub529 \uc2dc\uac04\uc774 \uc0c1\ub2f9\ud788 \uac78\ub838\ub2e4..
\n\ub300\ud68c\uc2dc\uac04\uc740 \ub2e8 2\uc2dc\uac04…
\n\ub530\ub77c\uc11c \ube60\ub978\ubd84\uc11d\uc744 \uc704\ud574 \ud328\ud0b7\uc744 \uc758\ubbf8\uc788\ub294 \ub2e8\uc704\ub85c \ucabc\uac1c\uc11c \ubd84\uc11d\ud588\uc5b4\uc57c \ud588\ub294\ub370 \ud558\ub294 \uc544\uc26c\uc6c0\uc774 \ub9ce\uc774 \ub0a8\uc558\ub2e4.<\/p>\n

1. editcap\uc744 \uc774\uc6a9\ud55c \ubd84\ud560<\/p>\n

Wireshark\ub97c \uc124\uce58\ud55c \ud3f4\ub354\uc5d0 \ubcf4\uba74 editcap.exe \uac00 \uc788\ub2e4.
\n\ub9d0\uadf8\ub300\ub85c pcap \ud30c\uc77c\uc744 \ud3b8\uc9d1 \ubc0f \ubcc0\ud658\uc744 \ud558\ub294 \ub3c4\uad6c\ub2e4..<\/p>\n

C:\\Program Files\\Wireshark>editcap.exe\r\nEditcap 1.10.1 (SVN Rev 50926 from \/trunk-1.10)\r\nEdit and\/or translate the format of capture files.\r\nSee http:\/\/www.wireshark.org for more information.\r\n\r\nUsage: editcap [options] ... <infile> <outfile> [ <packet#>[-<packet#>] ... ]\r\n\r\n<infile> and <outfile> must both be present.\r\nA single packet or a range of packets can be selected.\r\n\r\nPacket selection:\r\n  -r                     keep the selected packets; default is to delete them.\r\n  -A <start time>        only output packets whose timestamp is after (or equal\r\n                         to) the given time (format as YYYY-MM-DD hh:mm:ss).\r\n  -B <stop time>         only output packets whose timestamp is before the\r\n                         given time (format as YYYY-MM-DD hh:mm:ss).\r\n\r\nDuplicate packet removal:\r\n  -d                     remove packet if duplicate (window == 5).\r\n  -D <dup window>        remove packet if duplicate; configurable <dup window>\r\n                         Valid <dup window> values are 0 to 1000000.\r\n                         NOTE: A <dup window> of 0 with -v (verbose option) is\r\n                         useful to print MD5 hashes.\r\n  -w <dup time window>   remove packet if duplicate packet is found EQUAL TO OR\r\n                         LESS THAN <dup time window> prior to current packet.\r\n                         A <dup time window> is specified in relative seconds\r\n                         (e.g. 0.000001).\r\n\r\n           NOTE: The use of the 'Duplicate packet removal' options with\r\n           other editcap options except -v may not always work as expected.\r\n           Specifically the -r, -t or -S options will very likely NOT have the\r\n           desired effect if combined with the -d, -D or -w.\r\n\r\nPacket manipulation:\r\n  -s <snaplen>           truncate each packet to max. <snaplen> bytes of data.\r\n  -C <choplen>           chop each packet by <choplen> bytes. Positive values\r\n                         chop at the packet beginning, negative values at the\r\n                         packet end.\r\n  -t <time adjustment>   adjust the timestamp of each packet;\r\n                         <time adjustment> is in relative seconds (e.g. -0.5).\r\n  -S <strict adjustment> adjust timestamp of packets if necessary to insure\r\n                         strict chronological increasing order. The <strict\r\n                         adjustment> is specified in relative seconds with\r\n                         values of 0 or 0.000001 being the most reasonable.\r\n                         A negative adjustment value will modify timestamps so\r\n                         that each packet's delta time is the absolute value\r\n                         of the adjustment specified. A value of -0 will set\r\n                         all packets to the timestamp of the first packet.\r\n  -E <error probability> set the probability (between 0.0 and 1.0 incl.)\r\n                         that a particular packet byte will be randomly changed.\r\n\r\nOutput File(s):\r\n  -c <packets per file>  split the packet output to different files\r\n                         based on uniform packet counts\r\n                         with a maximum of <packets per file> each.\r\n  -i <seconds per file>  split the packet output to different files\r\n                         based on uniform time intervals\r\n                         with a maximum of <seconds per file> each.\r\n  -F <capture type>      set the output file type; default is pcapng.\r\n                         an empty \"-F\" option will list the file types.\r\n  -T <encap type>        set the output file encapsulation type;\r\n                         default is the same as the input file.\r\n                         an empty \"-T\" option will list the encapsulation types.\r\n\r\nMiscellaneous:\r\n  -h                     display this help and exit.\r\n  -v                     verbose output.\r\n                         If -v is used with any of the 'Duplicate Packet\r\n                         Removal' options (-d, -D or -w) then Packet lengths\r\n                         and MD5 hashes are printed to standard-out.\r\n\r\nC:\\Program Files\\Wireshark>\r\n<\/pre>\n
\uc774 editcap\uc744 \uc774\uc6a9\ud574\uc11c pcap \ud30c\uc77c\uc744 \ubd84\ud560 \ud560\uc218 \uc788\ub2e4.<\/p>\n
1) 30\ub9cc\uac1c \ud328\ud0b7\uc529 \ubd84\ud560
\nD:\\>editcap.exe -c 300000 original.pcap original_split.pcap
\n\"wireshark_pcap_editcap_1\"<\/p>\n
2) 60\ucd08 \ub2e8\uc704\ub85c \ubd84\ud560
\nD:\\>editcap -i 60 original.pcap original_timesplit.pcap
\n\"wireshark_pcap_editcap_2\"<\/p>\n
3) \ud2b9\uc815 \uc2dc\uac04 \ubd80\ubd84\ub9cc \ucd94\ucd9c
\nD:\\>editcap -A “2014-10-18 21:06:00” -B “2014-10-18 21:07:00” original.pcap original_timerange.cap
\n\"wireshark_pcap_editcap_3\"<\/p>\n
4) \ud2b9\uc815 \ud328\ud0b7\ub9cc \uc120\ud0dd\ud558\uc5ec \uc800\uc7a5
\nD:\\>editcap -r original.pcap original_selected.pcap 200-300 500-700
\n\"wireshark_pcap_editcap_4\"<\/p>\n
5) \ud2b9\uc815 \ud328\ud0b7\ub9cc \uc81c\uc678\ud558\uace0 \uc800\uc7a5
\nD:\\>editcap original.pcap original_unselected.pcap 200-300 500-700
\n\"wireshark_pcap_editcap_5\"<\/p>\n
\ub9cc\uc77c \ud328\ud0b7\uc744 \ub9c8\uc6b0\uc2a4 \uc624\ub978\ucabd \ubc84\ud2bc\uc73c\ub85c \uc27d\uac8c \ubd84\ud560\ud558\ub824\uba74..
\nEditcap_Split300000.zip<\/a> \ud30c\uc77c\uc744 \ub2e4\uc6b4\ubc1b\uc544 \uc124\uce58\ud558\uba74 \ub41c\ub2e4.
\n\"Editcap_Split300000_install\"<\/p>\n
\uadf8\ub7ec\uba74 \ub9c8\uc6b0\uc2a4 \uc624\ub978\ucabd \ubc84\ud2bc\uc5d0 Editcap_Split300000 \uba54\ub274\uac00 \uc0dd\uae30\uace0, pcap \ud30c\uc77c\uc744 Editcap_Split300000 \uc744 \uc774\uc6a9\ud558\uc5ec 30\ub9cc \ud328\ud0b7 \ub2e8\uc704\ub85c \ubd84\ud560\ud560 \uc218 \uc788\ub2e4.(\ub2e8, Wireshark \uc704\uce58\uac00 PATH\uc5d0 \uc124\uc815\ub418\uc5b4 \uc788\uc5b4\uc57c \ud568)
\n\"Editcap_Split300000_run\"<\/p>\n
2. SplitCap \uc138\uc158\ubcc4\ub85c \uc800\uc7a5
\nhttp:\/\/splitcap.sourceforge.net\/<\/a><\/p>\n
SplitCap\uc740 pcap \ud30c\uc77c\uc744 \ubd84\ud560\ud574\uc8fc\ub294 \ub3c4\uad6c\uc774\ub2e4.<\/p>\n
D:\\SplitCap_2-1>SplitCap.exe\r\nUsage: SplitCap [OPTIONS]...\r\n\r\nOPTIONS:\r\n-r <input_file> : Set the pcap file to read from.\r\n                  Use \"-r -\" to read from stdin\r\n-o <output_directory> : Manually specify output directory\r\n-d : Delete previous output data\r\n-p <nr_parallel_sessions> : Set the number of parallel sessions to keep in\r\n   memory (default = 10000). More sessions might be needed to split pcap\r\n   files from busy links such as an Internet backbone link, this will however\r\n   require more memory\r\n-b <file_buffer_bytes> : Set the number of bytes to buffer for each\r\n   session\/output file (default = 10000). Larger buffers will speed up the\r\n   process due to fewer disk write operations, but will occupy more memory.\r\n-s <GROUP> : Split traffic and group packets to pcap files based on <GROUP>\r\n   Possible values for <GROUP> are:\r\n             flow        : Flow, i.e. unidirectional traffic for each 5-tuple,\r\n                           is grouped together\r\n             host        : Traffic grouped to one file per host. Most packets\r\n                           will end up in two files.\r\n             hostpair    : Traffic grouped based on host-pairs communicating\r\n             nosplit     : Do not split traffic. Only create ONE output pcap.\r\n   (default) session     : Packets for each session (bi-directional flow) are\r\n                           grouped\r\n             seconds <s> : Split on time, new file after <s> seconds.\r\n             packets <c> : Split on packet count, new file after <c> packets.\r\n-ip <IP address to filter on>\r\n-port <port number to filter on>\r\n-y <FILETYPE> : Output file type for extracted data. Possible values\r\n   for <FILETYPE> are:\r\n             L7   : Only store application layer data\r\n   (default) pcap : Store complete pcap frames\r\n-z : Lazy file creation, i.e. only split if needed\r\n-recursive : Search pcap files in sub-directories recursively\r\n\r\nExample 1: SplitCap -r dumpfile.pcap\r\nExample 2: SplitCap -r dumpfile.pcap -o session_directory\r\nExample 3: SplitCap -r dumpfile.pcap -s hostpair\r\nExample 4: SplitCap -r dumpfile.pcap -s flow -y L7\r\nExample 5: SplitCap -r dumpfile.pcap -s seconds 3600\r\nExample 6: SplitCap -r dumpfile.pcap -ip 1.2.3.4 -port 80 -port 443 -s nosplit\r\nExample 7: SplitCap -r C:\\pcaps\\ -recursive -s host -port 53 -o DNS_dir\r\nExample 8: tcpdump -n -s0 -U -i eth0 -w - | mono SplitCap.exe -r -\r\n\r\nD:\\SplitCap_2-1>\r\n<\/pre>\n
editcap \ubcf4\ub2e4 \uc88b\uc740 \uae30\ub2a5\uc740 \uc138\uc158\ubcc4\ub85c \ubd84\ud560\ud574\uc900\ub2e4\ub294 \uac83\uc774\ub2e4.<\/p>\n
D:\\SplitCap_2-1>SplitCap.exe -r original.pcap<\/p>\n
\uc2e4\ud589\ud558\uba74 pcap \ud30c\uc77c\uba85\uacfc \ub3d9\uc77c\ud55c \ub514\ub809\ud1a0\ub9ac\ub97c \ub9cc\ub4e4\uace0 \uadf8\uc548\uc5d0 \uc138\uc158\ubcc4\ub85c \ud328\ud0b7\uc744 \ucabc\uac1c\uc11c \uc800\uc7a5\ud574\uc900\ub2e4.<\/p>\n
\"splitcap_res\"<\/p>\n
\ub2e8, \uc138\uc158\uc774 \ub9ce\uc740 \uacbd\uc6b0 \ud30c\uc77c\uc774 \ub9ce\uc774 \uc0dd\uc131\ub418\ubbc0\ub85c \uc8fc\uc758..<\/p>\n
3. Tshark \uc744 \uc774\uc6a9\ud574 \ucea1\uccd0\uc2dc \ubd84\ud560\ud558\uae30<\/p>\n
\uc804XX \ucc45\uc784\ub2d8\uaf10\uc11c \uc54c\ub824\uc8fc\uc2ec \ud301~
\ntshark -D \uc73c\ub85c \uc778\ud130\ud398\uc774\uc2a4 \ud655\uc778.<\/p>\n
tshark -i 7 -w test.pcap -b filesize:10000<\/p>\n
filesize \ub97c 10M \ub2e8\uc704\ub85c \ud30c\uc77c \uc800\uc7a5<\/p>\n
\ucc38\uace0 :
\nhttp:\/\/www.packetinside.com\/2010\/01\/%EB%B6%84%EC%84%9D%ED%95%A0-%ED%8C%A8%ED%82%B7-%EB%8D%B0%EC%9D%B4%ED%84%B0-%ED%81%AC%EA%B8%B0%EA%B0%80-%ED%81%B0-%EA%B2%BD%EC%9A%B0%EB%8A%94-%EC%9D%B4%EB%A0%87%EA%B2%8C-%ED%95%98%EC%9E%90.html<\/a>
\nhttp:\/\/www.packetinside.com\/2010\/07\/%EC%9C%88%EB%8F%84%EC%9A%B0%EC%97%90%EC%84%9C-%EB%A7%88%EC%9A%B0%EC%8A%A4%ED%95%9C%EB%B2%88%EC%9C%BC%EB%A1%9C-%ED%8C%A8%ED%82%B7%ED%8C%8C%EC%9D%BCpcap%EC%9D%84-%EB%B9%A0%EB%A5%B4%EA%B3%A0-%EC%89%BD%EA%B2%8C-%EB%B6%84%ED%95%A0%ED%95%98%EC%97%AC-%EB%B3%B4%EC%9E%90.html<\/a>
\nhttp:\/\/www.packetinside.com\/2010\/05\/tcp-udp-%EC%84%B8%EC%85%98%EB%B3%84%EB%A1%9C-%ED%8C%A8%ED%82%B7pcap-%ED%8C%8C%EC%9D%BC-%EB%B6%84%ED%95%A0%ED%95%98%EA%B8%B0.html<\/a><\/p>\n
 <\/p>\n","protected":false},"excerpt":{"rendered":"
  Wireshark pcap \ud30c\uc77c \ubd84\ud560 \uc774\ubc88 \ud575\ub354 \ud328\ud0b7\uc5d0\uc11c \uc7ac\uc77c \uace0\uc0dd\ud588\ub358 \ubd80\ubd84\uc740.. \uc2dc\uac04\uacfc\uc758 \uc2f8\uc6c0\uc774\uc600\ub2e4.. \uc81c\uacf5\ub41c pcap \ud30c\uc77c\uc758 \ud06c\uae30\ub294 \uc57d 250M \uc815\ub3c4.. \ud558\uc9c0\ub9cc \uc774 \ud30c\uc77c\uc744 \uc77d\uc5b4\uc11c \ud544\ud130\uac78\uace0 TCP follow \ub4f1 \ubd84\uc11d\ud558\ub294\ub370 \ub85c\ub529 \uc2dc\uac04\uc774 \uc0c1\ub2f9\ud788 \uac78\ub838\ub2e4.. \ub300\ud68c\uc2dc\uac04\uc740 \ub2e8 2\uc2dc\uac04… \ub530\ub77c\uc11c \ube60\ub978\ubd84\uc11d\uc744 \uc704\ud574 \ud328\ud0b7\uc744 … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[670],"tags":[1413,1411,1412,1410],"class_list":["post-6900","post","type-post","status-publish","format-standard","hentry","category-util-tools","tag-editcap","tag-pcap","tag-splitcap","tag-wireshark"],"yoast_head":"\nWireshark pcap \ud30c\uc77c \ubd84\ud560 - Apollo89.com<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/apollo89.com\/wordpress\/?p=6900\" \/>\n<meta property=\"og:locale\" content=\"ko_KR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Wireshark pcap \ud30c\uc77c \ubd84\ud560 - Apollo89.com\" \/>\n<meta property=\"og:description\" content=\"  Wireshark pcap \ud30c\uc77c \ubd84\ud560 \uc774\ubc88 \ud575\ub354 \ud328\ud0b7\uc5d0\uc11c \uc7ac\uc77c \uace0\uc0dd\ud588\ub358 \ubd80\ubd84\uc740.. \uc2dc\uac04\uacfc\uc758 \uc2f8\uc6c0\uc774\uc600\ub2e4.. \uc81c\uacf5\ub41c pcap \ud30c\uc77c\uc758 \ud06c\uae30\ub294 \uc57d 250M \uc815\ub3c4.. \ud558\uc9c0\ub9cc \uc774 \ud30c\uc77c\uc744 \uc77d\uc5b4\uc11c \ud544\ud130\uac78\uace0 TCP follow \ub4f1 \ubd84\uc11d\ud558\ub294\ub370 \ub85c\ub529 \uc2dc\uac04\uc774 \uc0c1\ub2f9\ud788 \uac78\ub838\ub2e4.. \ub300\ud68c\uc2dc\uac04\uc740 \ub2e8 2\uc2dc\uac04… \ub530\ub77c\uc11c \ube60\ub978\ubd84\uc11d\uc744 \uc704\ud574 \ud328\ud0b7\uc744 … Continue reading →\" \/>\n<meta property=\"og:url\" content=\"https:\/\/apollo89.com\/wordpress\/?p=6900\" \/>\n<meta property=\"og:site_name\" content=\"Apollo89.com\" \/>\n<meta property=\"article:published_time\" content=\"2014-11-04T08:03:33+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-01-08T14:53:11+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/10\/wireshark_pcap_editcap_1.png\" \/>\n<meta name=\"author\" content=\"apollo89\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\uae00\uc4f4\uc774\" \/>\n\t<meta name=\"twitter:data1\" content=\"apollo89\" \/>\n\t<meta name=\"twitter:label2\" content=\"\uc608\uc0c1 \ub418\ub294 \ud310\ub3c5 \uc2dc\uac04\" \/>\n\t<meta name=\"twitter:data2\" content=\"6\ubd84\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900\"},\"author\":{\"name\":\"apollo89\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\"},\"headline\":\"Wireshark pcap \ud30c\uc77c \ubd84\ud560\",\"datePublished\":\"2014-11-04T08:03:33+00:00\",\"dateModified\":\"2025-01-08T14:53:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900\"},\"wordCount\":272,\"commentCount\":1,\"image\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2014\\\/10\\\/wireshark_pcap_editcap_1.png\",\"keywords\":[\"editcap\",\"pcap\",\"splitcap\",\"wireshark\"],\"articleSection\":[\"Util\\\/Tools\"],\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900\",\"name\":\"Wireshark pcap \ud30c\uc77c \ubd84\ud560 - Apollo89.com\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2014\\\/10\\\/wireshark_pcap_editcap_1.png\",\"datePublished\":\"2014-11-04T08:03:33+00:00\",\"dateModified\":\"2025-01-08T14:53:11+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900#breadcrumb\"},\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900#primaryimage\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2014\\\/10\\\/wireshark_pcap_editcap_1.png\",\"contentUrl\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2014\\\/10\\\/wireshark_pcap_editcap_1.png\",\"width\":468,\"height\":130},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=6900#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\ud648\",\"item\":\"https:\\\/\\\/apollo89.com\\\/wordpress\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Wireshark pcap \ud30c\uc77c \ubd84\ud560\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#website\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/\",\"name\":\"Apollo89.com\",\"description\":\"\uc544\ud3f4\ub85c\uc528\uc758 \uc7a1\ub2e4\ud55c \uacbd\ud5d8\ub4e4..\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ko-KR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\",\"name\":\"apollo89\",\"description\":\"\uc544\ud3f4\ub85c89 \uc785\ub2c8\ub2e4.\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Wireshark pcap \ud30c\uc77c \ubd84\ud560 - Apollo89.com","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/apollo89.com\/wordpress\/?p=6900","og_locale":"ko_KR","og_type":"article","og_title":"Wireshark pcap \ud30c\uc77c \ubd84\ud560 - Apollo89.com","og_description":"  Wireshark pcap \ud30c\uc77c \ubd84\ud560 \uc774\ubc88 \ud575\ub354 \ud328\ud0b7\uc5d0\uc11c \uc7ac\uc77c \uace0\uc0dd\ud588\ub358 \ubd80\ubd84\uc740.. \uc2dc\uac04\uacfc\uc758 \uc2f8\uc6c0\uc774\uc600\ub2e4.. \uc81c\uacf5\ub41c pcap \ud30c\uc77c\uc758 \ud06c\uae30\ub294 \uc57d 250M \uc815\ub3c4.. \ud558\uc9c0\ub9cc \uc774 \ud30c\uc77c\uc744 \uc77d\uc5b4\uc11c \ud544\ud130\uac78\uace0 TCP follow \ub4f1 \ubd84\uc11d\ud558\ub294\ub370 \ub85c\ub529 \uc2dc\uac04\uc774 \uc0c1\ub2f9\ud788 \uac78\ub838\ub2e4.. \ub300\ud68c\uc2dc\uac04\uc740 \ub2e8 2\uc2dc\uac04… \ub530\ub77c\uc11c \ube60\ub978\ubd84\uc11d\uc744 \uc704\ud574 \ud328\ud0b7\uc744 … Continue reading →","og_url":"https:\/\/apollo89.com\/wordpress\/?p=6900","og_site_name":"Apollo89.com","article_published_time":"2014-11-04T08:03:33+00:00","article_modified_time":"2025-01-08T14:53:11+00:00","og_image":[{"url":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/10\/wireshark_pcap_editcap_1.png","type":"","width":"","height":""}],"author":"apollo89","twitter_card":"summary_large_image","twitter_misc":{"\uae00\uc4f4\uc774":"apollo89","\uc608\uc0c1 \ub418\ub294 \ud310\ub3c5 \uc2dc\uac04":"6\ubd84"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/apollo89.com\/wordpress\/?p=6900#article","isPartOf":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6900"},"author":{"name":"apollo89","@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82"},"headline":"Wireshark pcap \ud30c\uc77c \ubd84\ud560","datePublished":"2014-11-04T08:03:33+00:00","dateModified":"2025-01-08T14:53:11+00:00","mainEntityOfPage":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6900"},"wordCount":272,"commentCount":1,"image":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6900#primaryimage"},"thumbnailUrl":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/10\/wireshark_pcap_editcap_1.png","keywords":["editcap","pcap","splitcap","wireshark"],"articleSection":["Util\/Tools"],"inLanguage":"ko-KR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/apollo89.com\/wordpress\/?p=6900#respond"]}]},{"@type":"WebPage","@id":"https:\/\/apollo89.com\/wordpress\/?p=6900","url":"https:\/\/apollo89.com\/wordpress\/?p=6900","name":"Wireshark pcap \ud30c\uc77c \ubd84\ud560 - Apollo89.com","isPartOf":{"@id":"https:\/\/apollo89.com\/wordpress\/#website"},"primaryImageOfPage":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6900#primaryimage"},"image":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6900#primaryimage"},"thumbnailUrl":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/10\/wireshark_pcap_editcap_1.png","datePublished":"2014-11-04T08:03:33+00:00","dateModified":"2025-01-08T14:53:11+00:00","author":{"@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82"},"breadcrumb":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=6900#breadcrumb"},"inLanguage":"ko-KR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/apollo89.com\/wordpress\/?p=6900"]}]},{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/apollo89.com\/wordpress\/?p=6900#primaryimage","url":"https:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/10\/wireshark_pcap_editcap_1.png","contentUrl":"https:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2014\/10\/wireshark_pcap_editcap_1.png","width":468,"height":130},{"@type":"BreadcrumbList","@id":"https:\/\/apollo89.com\/wordpress\/?p=6900#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\ud648","item":"https:\/\/apollo89.com\/wordpress"},{"@type":"ListItem","position":2,"name":"Wireshark pcap \ud30c\uc77c \ubd84\ud560"}]},{"@type":"WebSite","@id":"https:\/\/apollo89.com\/wordpress\/#website","url":"https:\/\/apollo89.com\/wordpress\/","name":"Apollo89.com","description":"\uc544\ud3f4\ub85c\uc528\uc758 \uc7a1\ub2e4\ud55c \uacbd\ud5d8\ub4e4..","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/apollo89.com\/wordpress\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ko-KR"},{"@type":"Person","@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82","name":"apollo89","description":"\uc544\ud3f4\ub85c89 \uc785\ub2c8\ub2e4.","url":"https:\/\/apollo89.com\/wordpress\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6900","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6900"}],"version-history":[{"count":1,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6900\/revisions"}],"predecessor-version":[{"id":9484,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6900\/revisions\/9484"}],"wp:attachment":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6900"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6900"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6900"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}