Wireshark · Ethereal-users: [Ethereal-users] Mergecap output file size

["Kurt A. Bernard" <kabernard@xxxxxxxxxxxx>]

Hi all.  I'm trying to merge 7 days of captured data into one file so I
can look at it with NTOP.  I did it with an entire day and NTOP ran
grrrrrrrrrreat!

But when I try to merge the 7 daily capture files together mergecap
takes in the 7 ~690,000MB files and spits out a 21GB file (hmmm....) and
dies with the error:  File size exceeded

I have an analysis system set up with 590GB of disk space running on a
raid, Redhat 9.something, AMD 1900XP.

I fully intend to hack the code to remove the size limitation unless
someone knows of a reason it would be dunderheaded.  NTOP may yet gag on
the file (I have it trying to load the 21GB file now) but that will be
the next hurdle.  I suppose I could also look for a way to feed ntop
additional input files.  More hacking?

Any ideas out there?

Thanks,  Kurt Bernard
Pensacola FL