Ethereal-users: Re: [ethereal-users] Concatenate Traces

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 13 Jun 2000 12:02:01 -0700 (PDT)
> I have traces taken simultaneously from two etherent segments showing the
> comms between mutli-homed NT server and other devices in a network. Can I
> use editcap or tethereal to combine them in to a single trace file?

No.

However, it might be possible to add to editcap the ability to read more
than one capture file - of the same link-layer encapsulation type - and
write out a single combined file, or to write another program to combine
capture files.

I suspect it should be fairly straightforward; I'll look into it this
evening.