Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 6969] New: mergecap: Can't open or create <FILENAME>: Internal error

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6969

           Summary: mergecap: Can't open or create <FILENAME>: Internal
                    error
           Product: Wireshark
           Version: SVN
          Platform: x86
        OS/Version: Mac OS X 10.6
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: Extras
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: jyoung@xxxxxxx


Build Information:
Mergecap 1.7.1-SVN-41670 (SVN Rev 41670 from /trunk)
Merge two or more capture files into one.
See http://www.wireshark.org for more information.

Usage: mergecap [options] -w <outfile>|- <infile> [<infile> ...]

Output:
  -a                concatenate rather than merge files.
                    default is to merge based on frame timestamps.
  -s <snaplen>      truncate packets to <snaplen> bytes of data.
  -w <outfile>|-    set the output filename to <outfile> or '-' for stdout.
  -F <capture type> set the output file type; default is pcapng.
                    an empty "-F" option will list the file types.
  -T <encap type>   set the output file encapsulation type;
                    default is the same as the first input file.
                    an empty "-T" option will list the encapsulation types.

Miscellaneous:
  -h                display this help and exit.
  -v                verbose output.

--
Hello,

I just installed SVN 41670 from the buildbot on OSX Snow Leopard.

A simple mergecap command is failing with "Internal error"

> home $ mergecap -w combined.pcap ping.test.pcap.*
> mergecap: Can't open or create combined.pcap: Internal error
> home $ 

The ping.test.pcap.* files are a set of four simple ethernet pcap files created
with tcpdump using the following command:

> tcpdump -i en0 -w 'ping.test.pcap.%HH%MM%SS' -G 20 host 10.16.52.245

An earlier svn version of mergecap would successfully combine these
ping.test.pcap.* files into a usable pcapng file (Wireshark's default output
type) using the same mergecap command listed above. 

As a workaround for the "Can't open or create FILENAME: Internal error" we can
specify an output file type of "libpcap".

e.g.

> home $ mergecap -F libpcap -w combined.pcap ping.test.pcap.*

An attempt by mergecap to implicitly or explicitly an generate output file type
of pcapng fails with the "Internal error" message noted above.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.