I have an issue with windows 7 64 Bit when trying to use the merge function in Wireshark Version 1.12.1 (v1.12.1-0-g01b65bf from master-1.12) I get an internal error when it tries to read the file from my local temporary files directory. It's 32 bit wireshark. I tried opening Wireshark as Admin. I tried mergecap.exe from command prompt, also as admin I updated wireshark this morning There is no errors in application logs on computer management asked 17 Sep '14, 06:43 MrComputerSaint |
One Answer:
In most cases merging fails when there are more than one capture interface present in the files that are being merged. This is only relevant for PCAPng files though. You can check how many interfaces a file has by opening the summary statistics - if you see more than one interface in the table in the middle of the dialog you can't merge the files with Wireshark or mergecap at this time. answered 17 Sep '14, 13:52 Jasper ♦♦ Thanks Jasper, it does indeed have 2 interfaces. Kind regards, Andrew (23 Sep '14, 07:16) MrComputerSaint Hi guys - is there any workaround for this? (26 Aug '15, 23:30) Scott Harman 1 Try the top of trunk version there has been fixes made to the merge code, if it still fails opening a bug and attaching the two files would help to get it fixed. (27 Aug '15, 00:32) Anders ♦ You can also try to use TraceWrangler if you're running Windows. Add your files, create a "Merge" task and let it run. If it doesn't work let me know. (27 Aug '15, 02:23) Jasper ♦♦ |
What is the exact text of the error message?