Reference:
http://www.malware-traffic-analysis.net/training-exercises.html
https://serverfault.com/questions/384625/how-to-separate-pcap-by-unique-ip-address
https://www.wireshark.org/docs/man-pages/tshark.html
http://www.blackbytes.info/2013/09/network-forensics-with-tshark/
https://blogs.cisco.com/security/finding-a-needle-in-a-pcap
https://f00l.de/pcapfix/
pcapfix used to "damaged or currupted pcap"
https://osqa-ask.wireshark.org/questions/3243/error-message-the-capture-file-appears-to-be-damaged-or-corrupt