Wireshark · Ethereal-dev: Re: [Ethereal-dev] Contribution : a tool to merge pcap pipes # From: Ulf Lamping <ulf.lamping@xxxxxx

[Pierre JUHEN <pierre.juhen@xxxxxxxxxx>]

A pcap pipe is a pipe that carries pcap format.

I started from mergecap, but I use n+1 threads, n for reading, 1 for 
writing.

So there are side effects.

Each thread open it's own pipe, it's difficult to predict which one will 
open first.

I will take a look at the differences.


It certainly could be done now, but it's a bit tricky.

I will think about it.

Pierre
_________________

Ulf lamping wrote :



   Pierre JUHEN wrote:

       I wrote a tool derived from mergecap and tethereal, to merge n
       pcap pipes into a pipe or a file. 


   What is a "pcap pipe"?

   If I understand you correct, you merge two or more pcap files coming
   from a pipe into another file or pipe.

   If my assumption is correct, wouldn't it be better to include this
   into mergecap? (Didn't have a look at your code, so there might be
   reasons not to do so, that I don't see at first sight).