Wireshark mailing list archives
Re: Multiple input files
From: Dario Lombardo <dario.lombardo.ml () gmail com>
Date: Tue, 10 Sep 2013 09:29:01 +0200
On Fri, Sep 6, 2013 at 9:50 PM, Christopher Maynard < Christopher.Maynard () gtech com> wrote:
Two problems: 1) How do you guarantee the files will be processed in correct time order for appending?
I can't. If the user needs it, they can run reordercap.
2) mergecap today doesn't support reading from stdin. I think Jasper's solution is the way to go for now (less the -a option due to #1 above). Even my earlier proposed script isn't as useful as it could be. What might make it more useful (potentially) is if in addition to supporting reading from stdin, mergecap also supported reading from and writing to the same file, as that would completely avoid the tmp file(s) altogether, i.e.:
This would be a very useful option. But I don't think it's a feasible way, since the file handlers (in and out) are different.
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Multiple input files Dario Lombardo (Sep 05)
- Re: Multiple input files Evan Huus (Sep 05)
- Re: Multiple input files Evan Huus (Sep 05)
- Re: Multiple input files Dario Lombardo (Sep 05)
- Re: Multiple input files jasper . sharklists (Sep 05)
- Re: Multiple input files Christopher Maynard (Sep 05)
- Re: Multiple input files Evan Huus (Sep 05)
- Re: Multiple input files Evan Huus (Sep 05)
- Re: Multiple input files Christopher Maynard (Sep 05)
- Re: Multiple input files Dario Lombardo (Sep 06)
- Re: Multiple input files Christopher Maynard (Sep 06)
- Re: Multiple input files Dario Lombardo (Sep 10)