Re: multiple pcap files from stdin

[Marco van den Bovenkamp <marco () linuxgoeroe dhs org>]

Michael L. Artz wrote:

> Is there a way for me to pipe multiple pcap files to tcpdump on stdin, 
> such as:
>
> cat file1.pcap file2.pcap | tcpdump -r -

Look at mergecap, which comes with Ethereal (http://www.ethereal.com). 
It'll do what you want, like this:

mergecap -w /dev/stdout file1.pcap file2.pcap | tcpdump -r -

The fact that '/dev/stdout' works as argument to the '-w' option isn't 
documented, by the way.

--

                Regards,

                        Marco.

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe