Hm. I'd thought that pcap files have an associated header, and experimental
evidence seems to confirm it.
% cat dumpfile1 dumpfile2 | tcpdump -r - -w 192.168.1.1 'host 192.168.1.1'
tcpdump: pcap_loop: truncated dump file
cat: write error: Broken pipe
Other thoughts?
-g
On Wed, 14 Nov 2001, Michael Richardson wrote:
> Date: Wed, 14 Nov 2001 12:21:38 -0500
> From: Michael Richardson <[EMAIL PROTECTED]>
> To: Glenn Forbes Fleming Larratt <[EMAIL PROTECTED]>
> Cc: [EMAIL PROTECTED]
> Subject: Re: Concatenate files written with -w ?
>
>
> I believe that you can just concatenate pcap files with "cat".
> (I haven't tried this though...)
>
> ] ON HUMILITY: to err is human. To moo, bovine. | firewalls [
> ] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[
> ] [EMAIL PROTECTED] http://www.sandelman.ottawa.on.ca/ |device driver[
> ] panic("Just another NetBSD/notebook using, kernel hacking, security guy"); [
>
Glenn Forbes Fleming Larratt
Rice University Network Management
[EMAIL PROTECTED]
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
