This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I see in the documentation that mergecap reads and expands gzipped pcap files on the fly. However, I can't see any option for creating a gzipped file as the result of the merge, ditto for editcap. I'm using Windows 7.

Does such an option exist?

If not, are there any plans to add it?

asked 26 Apr '16, 17:41

LurkingKiwi's gravatar image

LurkingKiwi
6112
accept rate: 0%


No, there doesn't appear to be a way to convince mergecap or editcap to write gzip'd files.

It appears making 'editcap' do it would be quite easy: it just needs a command-line option and to pass a boolean (based on that option) to wtap_dump_open_ng().

mergecap doesn't currently use the wiretap routines so making it write gzip'd files would be harder.

I can't find any enhancement requests asking for such functionality. You could always open one if you could use the functionality. If you do, please be sure to:

  1. Mention this question in the bug
  2. Add a comment here with a link to the bug
permanent link

answered 27 Apr '16, 06:30

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572
accept rate: 27%

(27 Apr '16, 16:42) LurkingKiwi
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×14

question asked: 26 Apr '16, 17:41

question was seen: 845 times

last updated: 27 Apr '16, 16:42

p​o​w​e​r​e​d by O​S​Q​A