Lucent Technologies Ethereal manual Example C.4. Simple example of using mergecap

Related command line tools

ngwsniffer_1_1 - Network Associates Sniffer (Windows-based) 1.1 ngwsniffer_2_0 - Network Associates Sniffer (Windows-based) 2.00x visual - Visual Networks traffic capture

5views - Accellent 5Views capture

niobserverv9 - Network Instruments Observer version 9 default is libpcap

-hPrints the version and options and exits.

-vCauses mergecap to print a number of messages while it's working.

-aCauses the frame timestamps to be ignored, writing all packets from the first input file fol- lowed by all packets from the second input file. By default, when -ais not specified, the con- tents of the input files are merged in chronological order based on each frame's timestamp. Note: when merging, mergecap assumes that packets within a capture file are already in chro- nological order.

-sSets the snapshot length to use when writing the data. -wSets the output filename.

-TSets the packet encapsulation type of the output capture file. -FSets the file format of the output capture file.

A simple example merging dhcp-capture.libpcap and imap-1.libpcap into out- file.libpcap is shown below.

Example C.4. Simple example of using mergecap

$ mergecap -w outfile.libpcap dhcp-capture.libpcap imap-1.libpcap

172