tcpdump mailing list archives

Re: multiple pcap files from stdin


From: "Steve Bonds" <pow7yec02 () sneakemail com>
Date: Sat, 19 Apr 2003 11:11:24 -0700 (PDT)

On Sat, 19 Apr 2003, Michael L. Artz dragon-at-october29.net |TCPdump Workers| wrote:

Is there a way for me to pipe multiple pcap files to tcpdump on stdin, 
such as:

cat file1.pcap file2.pcap | tcpdump -r -

The utility "tcpslice", included with tcpdump will do this for you.  It
can also slice up a single capture based on timestamps.

In your example you would use:

tcpslice file1.pcap file2.pcap | tcpdump -r -

  -- Steve


-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


Current thread: