Michael Richardson wrote: > > I believe that you can just concatenate pcap files with "cat". > (I haven't tried this though...) > > ] ON HUMILITY: to err is human. To moo, bovine. | firewalls [ > ] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[ > ] [EMAIL PROTECTED] http://www.sandelman.ottawa.on.ca/ |device driver[ > ] panic("Just another NetBSD/notebook using, kernel hacking, security guy"); [ > - > This is the TCPDUMP workers list. It is archived at > http://www.tcpdump.org/lists/workers/index.html > To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
No, the pcap file has a file header followed by individiual packet records. The second file's file header will be in the way if you cat them together. Ethereal has a utility program called 'mergecap' which can merge capture files. --gilbert - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
