Wireshark

  • Riverbed Technology
  • WinPcap
SHARKFEST '13 - Wireshark Developer and User Conference - June 16-19, 2013 - UC Berkeley
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Using Mergecap??

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Sake Blok <sake@xxxxxxxxxx>
Date: Mon, 21 Sep 2009 08:09:43 +0200

On Fri, Sep 18, 2009 at 12:08:56PM -0500, Gaudineer, Kevin wrote:
> Just curious if I did the wrong thing here.  I used dumpcap to 
> do an unattended capture.  After performing the unattended capture 
> I have several files that I would like to merge together.  But 
> these file names are long.  Is there a way to use mergecap with 
> wild cards or should I just bite the bullet and rename all of 
> the files with a shorter name?

You can use wildcard filesnames if your shell supports it. It is the
shell that expand the wildcard names and then passes the result to
mergecap.

I use something like "mergecap -w outfile.cap prefix*.cap" a lot :-)

Cheers,
    Sake

  • References:
    • [Wireshark-users] Using Mergecap??
      • From: Gaudineer, Kevin
  • Prev by Date: Re: [Wireshark-users] How to Change Specific IP Src and/or Dst in Capture File?
  • Next by Date: [Wireshark-users] Retransmits of GIOP
  • Previous by thread: [Wireshark-users] Using Mergecap??
  • Next by thread: [Wireshark-users] no eth interface
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation