Ethereal-users: Re: [Ethereal-users] Re-assembling half duplex streams

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxx>
Date: Fri, 8 Nov 2002 14:19:02 -0800
On Fri, Nov 08, 2002 at 05:14:05PM -0500, Chris Rapier wrote:
> What I'd like to do is have a tool that will merge the two half 
> duplex dumps into a full duplex one.
> 
> Can ethereal do anything like this?

No, but mergecap, which comes with Ethereal, can merge two (or more)
capture files, in any format that Ethereal can read (as it uses the same
library that Ethereal and Tethereal do to read capture files), into a
file written in any format that Ethereal can write (as long as the
output format can handle both network layer types).

> Would I need to sync the GigE clocks to an external source?

It would probably work better if the time stamps in the two capture
files on each of the ports were synchronized.