First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Cannot merge multiple pcap files easily

  • retag add tags

I have tried to merge multiple pcap files. I cannot select more than one pcap file at a time to merge them. I have thousands to merge, so I'd like a shortcut. CNTRL select and SHIFT select, down arrow, etc. do not work.

the_regular_size_lebowski's avatar
1
the_regular_size_lebowski
asked 2022-04-12 14:03:12 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

2 Answers

1

I thing you should give mergecap a try.

Jaap's avatar
13.7k
Jaap
answered 2022-04-12 16:53:29 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Thank you. I have looked into the mergecap command line process, but I can't seem to figure out: 1) how to point the command to the folders containing the PCAPs, and 2) how to point the command to an output folder. Any help is greatly appreciated

the_regular_size_lebowski's avatar the_regular_size_lebowski (2022-04-12 17:11:26 +0000) edit
more
  • delete

There is an example here - PCAP Split and Merge - that has a wildcard "*" in the filename.

Chuckc's avatar Chuckc (2022-04-12 21:37:44 +0000) edit
more
  • delete
add a comment see more comments
0

Add the Wireshark folder to your path. This will allow any program in the Wireshark folder to run from any folder, including mergecap and editcap.

BigFatCat's avatar
31
BigFatCat
answered 2022-04-12 18:29:10 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer