["Prakash" <jprakashbabu@xxxxxxxxxx>]

Greetings to all,

 

 I am working in HP-UX platform.

 I am using the 0.10.5 ethereal version                           

 I have a problem with the -w  option of mergecap.

 

Capture five packets

# tethereal -c 5 -w one.cap
Capturing on lan0
5

 

Capture five packets

# tethereal -c 5 -w two.cap
Capturing on lan0
5

 

Combine using mergecalp

# mergecap -w three.cap one.cap two.cap
mergecap: couldn't open output file

 

But if  this file already exists it works fine

touch three.cap

mergecap -w three.cap one.cap two.cap

tethereal -r three.cap
  1   0.000000  172.16.1.37 -> 172.16.1.156 TELNET Telnet Data ...
  2   0.000133 172.16.1.156 -> 172.16.1.37  TELNET Telnet Data ...
  3   0.000194 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
  4   0.000254 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
  5   0.000297 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
  6   5.911928 172.16.1.156 -> 172.16.1.49  TELNET [TCP Previous segment lost] Telnet Data ...
  7   5.912043 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
  8   5.912089 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
  9   5.912133 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...
 10   5.912178 172.16.1.156 -> 172.16.1.49  TELNET Telnet Data ...

 

        Am i going wrong somewhere or is this a problem with the new version

Thanks,

Prakash