Wireshark · Ethereal-users: [Ethereal-users] Re: mergecap screwing up timestamps

[Edward Mazurek <emazurek@xxxxxxxxx>]

Sorry... I realized I had a typo. It's mergecap 0.10.7.

Also, I'm outputting the file in ngwsniffer2_0 format.

Any help is appreciated!

Thanks,

Ed

Edward Mazurek wrote:

> Hi,
>
> I have mergecap 0.10.4. I think it's the latest as I just downloaded it.
>
> Anyone out there using mergecap to merge together trace files?
>
> I'm trying to merge together some trace files and it's screwing
> up the timestamps in the output file.
>
> For example:
>
> - In the output file the timestamps start @ 3:30AM then at around
> frame 350 the timestamps go to 2:19:05AM. The are supposed to be
> in chronological order.
>
> - Also, all of the records timestamps are not the same in the output
> file vs. what they were in the input file. I'm using the current
> ethereal to view both the input and output(merged) file.
>
> Any help is appreciated!
>
> Thanks,
>
> Ed Mazurek