Analysing a large size of PCAP is pain in the ass. So, why not we just split it into a multiple files. We can do that with editcap. In this example, we are splitting by packet per file. $ editcap -c 100000 in.pcapng out.pcapng
==Rip all of them! It serve you well==