Wireshark · Wireshark-dev: Re: [Wireshark-dev] Query on loading packets using command line options

[j.snelders@xxxxxxxxxx]

>-- Oorspronkelijk bericht --
>Date: Wed, 17 Dec 2008 07:39:03 -0800
>From: Gerald Combs <gerald@xxxxxxxxxxxxx>
>To: Developer support list for Wireshark <wireshark-dev@xxxxxxxxxxxxx>
>Subject: Re: [Wireshark-dev] Query on loading packets using command
>	line	options
>Reply-To: Developer support list for Wireshark <wireshark-dev@xxxxxxxxxxxxx>
>
>
>j.snelders@xxxxxxxxxx wrote:
>> Hi Atdev,
>> 
>> You can ust the pipe sign | , but this will start Wireshark twice.
>> wireshark -r packet1.pcap | wireshark -r packet2.cap
>> 
>> 
>> Or you can create file sets.
>> Rename your files like this:
>> packet1_00000_20081217000000.pcap
>> packet1_00001_20081217000000.pcap
>> 
>> Start Wireshark and load on of the files.
>> Got to File -> File Set -> List Files
>> Load the other file by selecting it.
>> 
>> Somehow this won't work by using the command line to start Wireshark.
>
>Does this work?
>
>mergecap -w - file1.pcap file2.pcap | wireshark -k -i -

No, this one does:
$ mergecap -w mergepacket1_and_2.pcap packet1.pcap packet2.pcap | wireshark
-r
mergepacket1_and_2.pcap