Break a packet trace into multiple sub-traces by connection
Break a packet trace into some number of sub-traces
tcpsplit
$ tcpsplit -i input.pcap -o output
$ tcpsplit -i capture.pcap -o /tmp/split
$ tcpsplit -h