Wireshark-users: Re: [Wireshark-users] mergecap: another size limitation?

From: Sake Blok <sake@xxxxxxxxxx>
Date: Thu, 6 Aug 2009 06:39:21 +0200

On Thu, Aug 06, 2009 at 01:47:39AM +0900, Andrej van der Zee wrote:
> 
>    I am trying to merge some pcap files on Linux with mergecap, but after
>    writing 2.0GB it stops with the message "not all requested data could be
>    written". Is there a way to still merge these files? The packets in the
>    resulting cap-file have to be chronologically sorted like mergecap does.
> 
>    Is this size-problem also a gzip-limitation? Is there a chance mergecap
>    does work on Windows for bigger files?

Yes, AFAICT this is also due to gzip support and the limitations of the
gzip libraries. I don't think this is different for the Windows build.

Cheers,
     Sake