Wireshark · Wireshark-users: Re: [Wireshark-users] Wireshark-users: Merging a bunch of PCAP files

ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] Wireshark-users: Merging a bunch of PCAP files

From: j.snelders@xxxxxxxxxx

Date: Thu, 11 Jun 2009 17:05:35 +0200

On Thu, 11 Jun 2009 07:36:19 -0700 Ujjval Karihaloo wrote:

> How can I merge a bunch of PCAP files. When I use Wireshark GUI, I can
only > do one at a time. 
> Ujjval.

Hi Ujjval,

You can use mergecap:
http://www.wireshark.org/docs/man-pages/mergecap.html
Usage: mergecap [options] -w <outfile>|- <infile> ...

$ mergecap -w mergedfiles.cap test1.cap test2.cap test3.cap

Regards
Joan

Follow-Ups:
- Re: [Wireshark-users] Wireshark-users: Merging a bunch of PCAP files
  - From: Ujjval Karihaloo

Prev by Date: Re: [Wireshark-users] Merging a bunch of PCAP files
Next by Date: Re: [Wireshark-users] [Dissector bug, protocol DIAMETER: proto.c:1044: failed assertion"DISSECTOR_ASSERT_NOT_REACHED"]
Previous by thread: Re: [Wireshark-users] TLSv1 vs SSL3.0 decoding issue
Next by thread: Re: [Wireshark-users] Wireshark-users: Merging a bunch of PCAP files
Index(es):
- Date
- Thread

© Wireshark Foundation · Privacy Policy

Facebook·Mastodon·Twitter·YouTube