Ethereal-dev: Re: [Ethereal-dev] mergecap: How to merge Ethernet & Linux cooked capture files?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 22 Feb 2006 10:45:41 -0800
Guy Harris wrote:
Maynard, Chris wrote:

	...

If not, then what
would it take to be able to support this type of merge?

Add support for pcap-NG format:

...or write a tool that converts Linux cooked capture headers to Ethernet headers (adding fake source or destination addresses), and run that tool on the Linux cooked capture, and then merge the two Ethernet capture files.