Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] problem with mergecap -w option

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Mon, 12 Jul 2004 23:06:03 +0200
Prakash wrote:

Hello Developers,
I am working in HP-UX platform.

How deep? ;-)

I am using the 0.10.5 ethereal version I have a problem with the -w option of mergecap. *But if this file already exists it works fine*
touch three.cap
mergecap -w three.cap one.cap two.cap
tethereal -r three.cap
  1   0.000000  172.16.1.37 -> 172.16.1.156 TELNET Telnet Data ...
  2   0.000133 172.16.1.156 -> 172.16.1.37  TELNET Telnet Data ...
  3   0.000194 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
  4   0.000254 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
  5   0.000297 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
6 5.911928 172.16.1.156 -> 172.16.1.49 TELNET [TCP Previous segment lost] Telnet Data ...
  7   5.912043 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
  8   5.912089 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
  9   5.912133 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
 10   5.912178 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
Am i going wrong somewhere or is this a problem with the new version

Yes, this is a problem with the new 0.10.5 version.

The former version of mergecap created a new output file, or overwrites an already existing one.

While changing the merge stuff to include it into Ethereal's menu and Drag-n-Drop, I've made a mistake with the flags used in mergecap opening the output file.

It will overwrite an existing file, but won't create a new one (just as you've described).

I've checked in fix into CVS for this.

Regards, ULFL