https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6969
Summary: mergecap: Can't open or create <FILENAME>: Internal
error
Product: Wireshark
Version: SVN
Platform: x86
OS/Version: Mac OS X 10.6
Status: NEW
Severity: Minor
Priority: Low
Component: Extras
AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
ReportedBy: jyoung@xxxxxxx
Build Information:
Mergecap 1.7.1-SVN-41670 (SVN Rev 41670 from /trunk)
Merge two or more capture files into one.
See http://www.wireshark.org for more information.
Usage: mergecap [options] -w <outfile>|- <infile> [<infile> ...]
Output:
-a concatenate rather than merge files.
default is to merge based on frame timestamps.
-s <snaplen> truncate packets to <snaplen> bytes of data.
-w <outfile>|- set the output filename to <outfile> or '-' for stdout.
-F <capture type> set the output file type; default is pcapng.
an empty "-F" option will list the file types.
-T <encap type> set the output file encapsulation type;
default is the same as the first input file.
an empty "-T" option will list the encapsulation types.
Miscellaneous:
-h display this help and exit.
-v verbose output.
--
Hello,
I just installed SVN 41670 from the buildbot on OSX Snow Leopard.
A simple mergecap command is failing with "Internal error"
> home $ mergecap -w combined.pcap ping.test.pcap.*
> mergecap: Can't open or create combined.pcap: Internal error
> home $
The ping.test.pcap.* files are a set of four simple ethernet pcap files created
with tcpdump using the following command:
> tcpdump -i en0 -w 'ping.test.pcap.%HH%MM%SS' -G 20 host 10.16.52.245
An earlier svn version of mergecap would successfully combine these
ping.test.pcap.* files into a usable pcapng file (Wireshark's default output
type) using the same mergecap command listed above.
As a workaround for the "Can't open or create FILENAME: Internal error" we can
specify an output file type of "libpcap".
e.g.
> home $ mergecap -F libpcap -w combined.pcap ping.test.pcap.*
An attempt by mergecap to implicitly or explicitly an generate output file type
of pcapng fails with the "Internal error" message noted above.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
