I used the Mergcap command and it does not seem to take *.pcap as the input for multiple files. Is that a Mergcap limitation? asked 25 Nov '10, 12:24  jambomj edited 25 Nov '10, 16:49 |
4 Answers:
Does this thread help you? merging many files using mergecap answered 25 Nov '10, 14:22  Jaap ♦ |
After I posted my question I found a post which uses a batch as follows: In the folder were all your pcap files are create a batch file called combine.bat run the batch from the command line so you know if it is working or not. The batch file: combine.bat: setlocal enabledelayedexpansion set myfiles= for %%f in (*.pcap) do set myfiles=!myfiles! %%f Cmd /V:on /c "c:Program FilesWiresharkmergecap.exe" -w temp.pcap %myfiles% answered 25 Nov '10, 14:45 jambomj edited 25 Nov '10, 14:47 |
I think mergecap does not work with wildcards like *.pcap. You'll have to supply all filenames to it one by one, like this: "mergecap -w out.pcap infile1.pcap infile2.pcap infile3.pcap..." At least that's what I do when I have to merge multiple files, and I usually also use -a for concatenation. answered 25 Nov '10, 14:30  Jasper ♦♦ |
Pcapjoiner can do that for you...googe it answered 06 Nov '11, 21:42  Ron33 |
That may not work in all cases if the number of files is very large. See bug 1118: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1118