Lucent Technologies Ethereal - Manual (Page 186)

ngwsniffer_1_1 - Network Associates Sniffer (Windows-based) 1.1
ngwsniffer_2_0 - Network Associates Sniffer (Windows-based) 2.00x
visual - Visual Networks traffic capture
5views - Accellent 5Views capture
niobserverv9 - Network Instruments Observer version 9
default is libpcap
-h Prints the version and options and exits.
-v Causes mergecap to print a number of messages while it's working.
-a Causes the frame timestamps to be ignored, writing all packets from the first input file fol-
lowed by all packets from the second input file. By default, when -a is not specified, the con-
tents of the input files are merged in chronological order based on each frame's timestamp.
Note: when merging, mergecap assumes that packets within a capture file are already in chro-
nological order.
-s Sets the snapshot length to use when writing the data.
-w Sets the output filename.
-T Sets the packet encapsulation type of the output capture file.
-F Sets the file format of the output capture file.
A simple example merging dhcp-capture.libpcap and imap-1.libpcap into out-
file.libpcap is shown below.
Example C.4. Simple example of using mergecap
$ mergecap -w outfile.libpcap dhcp-capture.libpcap imap-1.libpcap
Related command line tools
172