Ethereal-dev: Re: [Ethereal-dev] mergecap: How to merge Ethernet & Linux cooked capture files?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Sake Blok <sake@xxxxxxxxxx>
Date: Wed, 22 Feb 2006 17:31:56 +0100
On Wed, Feb 22, 2006 at 09:30:10AM -0500, Maynard, Chris wrote:
> I have 2 capture files that I would like to merge.  One file has IEEE
> 802.3 Ethernet encapsulation and the other has Linux cooked capture
> encapsulation.  
> [...]
> Is it possible to merge these two files?  If so, what are the options to
> mergecap that would allow this to work correctly?  If not, then what

I have not tried this myself, but I would use editcap to convert one
of the files to the format of the other and then try to merge those 
two into one file with mergecap.


Cheers,  Sake