Wireshark mailing list archives
Re: Multiple input files
From: Christopher Maynard <Christopher.Maynard () gtech com>
Date: Thu, 5 Sep 2013 13:26:48 +0000 (UTC)
Dario Lombardo <dario.lombardo.ml@...> writes:
Hi listI was trying to change the code of tshark to support multiple -r
switches. The aim is to have many input files and one output file. Before getting mad in changing it, I was wondering if it makes sense or not, and if it was addressed before in some way.
An example of use of it: tshark -r input1.pcap -r input2.pcap -r input3.pcap -Y
"dns.qry.name contains google" -o google.pcapThanks for your suggestions. Why not just pipe the output of mergecap[1] to tshark? [1]: http://www.wireshark.org/docs/man-pages/mergecap.html ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Multiple input files Dario Lombardo (Sep 05)
- Re: Multiple input files Evan Huus (Sep 05)
- Re: Multiple input files Evan Huus (Sep 05)
- Re: Multiple input files Dario Lombardo (Sep 05)
- Re: Multiple input files jasper . sharklists (Sep 05)
- Re: Multiple input files Christopher Maynard (Sep 05)
- Re: Multiple input files Evan Huus (Sep 05)
- Re: Multiple input files Evan Huus (Sep 05)
- Re: Multiple input files Christopher Maynard (Sep 05)
- Re: Multiple input files Dario Lombardo (Sep 06)
- Re: Multiple input files Christopher Maynard (Sep 06)
- Re: Multiple input files Dario Lombardo (Sep 10)