If you're like me, you probably have terabytes of PCAP files filling up your hard drive. In previous articles I have reviewed one of my favorite "big trace file" tools Packet Analyzer (formerly known as Pilot) from Riverbed. I absolutely love using this tool for quickly searching through a big trace looking for that needle in the haystack.
What happens when you have 100's of haystacks (PCAP files) and you still want to find that needle?
In this short video we will look at a way to take that hard drive full of PCAPs, index them, and allow you to very quickly sort through terabytes of data.