Ethereal-users: Re: [ethereal-users] Concatenate Traces

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 13 Jun 2000 12:02:01 -0700 (PDT)
> I have traces taken simultaneously from two etherent segments showing the
> comms between mutli-homed NT server and other devices in a network. Can I
> use editcap or tethereal to combine them in to a single trace file?

No.

However, it might be possible to add to editcap the ability to read more
than one capture file - of the same link-layer encapsulation type - and
write out a single combined file, or to write another program to combine
capture files.

I suspect it should be fairly straightforward; I'll look into it this
evening.