in reply to vlan separation

You may know this already, but your connection must be setup as a monitor / mirror port on the switch. Or set it up as a trunk and monitor each virtual interface in a different process. UPDATE: Sorry I did not read carefully, you already have the pcap file.

Replies are listed 'Best First'.
Re^2: vlan separation
by l0rddarkf0rce (Initiate) on Dec 18, 2011 at 15:13 UTC
    I actually have ~ 2TB worth and they all have the vlan tag, unfortunately the program that i'm trying to import them into do not like vlans so I want to remove the tag and thought the easiest way may be to just write a script that would take care of this.