Note: when merging, mergecap assumes that packets within a capture file are already in chro-
nological order.
-s Sets the snapshot length to use when writing the data.
-w Sets the output filename.
-T Sets the packet encapsulation type of the output capture file.
-F Sets the file format of the output capture file.
A simple example merging dhcp-capture.libpcap and imap-1.libpcap into out-
file.libpcap is shown below.
Example D.5. Simple example of using mergecap
$ mergecap -w outfile.libpcap dhcp-capture.libpcap imap-1.libpcap
Related command line tools
257
Kommentare zu diesen Handbüchern