Wireshark-users: Re: [Wireshark-users] Wireshark-users: Merging a bunch of PCAP files

From: j.snelders@xxxxxxxxxx
Date: Thu, 11 Jun 2009 17:05:35 +0200

On Thu, 11 Jun 2009 07:36:19 -0700 Ujjval Karihaloo wrote:

> How can I merge a bunch of PCAP files. When I use Wireshark GUI, I can
only > do one at a time. 
> Ujjval.
 

Hi Ujjval,

You can use mergecap:
http://www.wireshark.org/docs/man-pages/mergecap.html
Usage: mergecap [options] -w <outfile>|- <infile> ...

$ mergecap -w mergedfiles.cap test1.cap test2.cap test3.cap

Regards
Joan