Greetings to all,
I am working in HP-UX
platform.
I am using the 0.10.5 ethereal
version
I have a problem with the -w option of
mergecap.
Capture five packets
# tethereal -c 5 -w one.cap
Capturing on
lan0
5
Capture five packets
# tethereal -c 5 -w two.cap
Capturing on lan0
5
Combine using mergecalp
# mergecap -w three.cap one.cap two.cap
mergecap: couldn't open output
file
But if this file already exists it works fine
touch three.cap
mergecap -w three.cap one.cap two.cap
tethereal -r three.cap
1 0.000000 172.16.1.37
-> 172.16.1.156 TELNET Telnet Data ...
2 0.000133
172.16.1.156 -> 172.16.1.37 TELNET Telnet Data ...
3 0.000194 172.16.1.156 -> 172.16.1.49 TELNET Telnet Data
...
4 0.000254 172.16.1.156 -> 172.16.1.49 TELNET
Telnet Data ...
5 0.000297 172.16.1.156 ->
172.16.1.49 TELNET Telnet Data ...
6 5.911928
172.16.1.156 -> 172.16.1.49 TELNET [TCP Previous segment lost] Telnet
Data ...
7 5.912043 172.16.1.156 -> 172.16.1.49
TELNET Telnet Data ...
8 5.912089 172.16.1.156 ->
172.16.1.49 TELNET Telnet Data ...
9 5.912133
172.16.1.156 -> 172.16.1.49 TELNET Telnet Data
...
10 5.912178 172.16.1.156 -> 172.16.1.49 TELNET
Telnet Data ...
Am i going wrong somewhere
or is this a problem with the new version
Thanks,
Prakash