Wireshark · Wireshark-users: Re: [Wireshark-users] combining multiple trace files

[sandeep nitta <sandeep.nitta@xxxxxxxxx>]

Multiple trace files can be combined using mergecap.

you need to explain what is a ticket id. if you are talking about any string in the payload of the trace file, you can search for the same using

 

Edit-> Find packet->select string (in find by) and then enter the string you want to search in the filter field below.

 

Thanks,

Sandeep

On Fri, Apr 23, 2010 at 8:07 AM, false <jctx09@xxxxxxxxx> wrote:

Is there a process to combine multiple trace files (web, app, db) and then do a filter for a ticket id in the data of the entire trace? I need to find where a delay is taking place, ie: web, app, db? Any assistance is very much appreciated.

 

Thank you,

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe