>-- Oorspronkelijk bericht --
>Date: Wed, 17 Dec 2008 07:39:03 -0800
>From: Gerald Combs <[email protected]>
>To: Developer support list for Wireshark <[email protected]>
>Subject: Re: [Wireshark-dev] Query on loading packets using command
>       line    options
>Reply-To: Developer support list for Wireshark <[email protected]>
>
>
>[email protected] wrote:
>> Hi Atdev,
>> 
>> You can ust the pipe sign | , but this will start Wireshark twice.
>> wireshark -r packet1.pcap | wireshark -r packet2.cap
>> 
>> 
>> Or you can create file sets.
>> Rename your files like this:
>> packet1_00000_20081217000000.pcap
>> packet1_00001_20081217000000.pcap
>> 
>> Start Wireshark and load on of the files.
>> Got to File -> File Set -> List Files
>> Load the other file by selecting it.
>> 
>> Somehow this won't work by using the command line to start Wireshark.
>
>Does this work?
>
>mergecap -w - file1.pcap file2.pcap | wireshark -k -i -

No, this one does:
$ mergecap -w mergepacket1_and_2.pcap packet1.pcap packet2.pcap | wireshark
-r
mergepacket1_and_2.pcap

       


___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:[email protected]?subject=unsubscribe

Reply via email to