Wireshark-bugs: [Wireshark-bugs] [Bug 12385] Add support for gzip-compressed output from mergeca
Date: Thu, 16 Jun 2016 02:56:21 +0000

Comment # 1 on bug 12385 from
(In reply to Len Chisholm from comment #0)
> mergecap doesn't currently use the wiretap routines so making it write
> gzip'd files would be harder.

Mergecap doesn't use anything to read or write capture files itself any more -
it uses the merge API to do all the heavy lifting.

The merge API is a wiretap API, and uses wtap_dump_fdopen_ng(), so mergecap
does, in fact, use wiretap to read and write capture files, and could write a
gzip file (as long as the output format isn't a format like Microsoft Network
Monitor format, where writing it involves seeking and rewriting part of the
file).


You are receiving this mail because:
  • You are watching all bug changes.