Re: [ethereal-users] Concatenate Traces

[Guy Harris <guy@xxxxxxxxxx>]

> I have traces taken simultaneously from two etherent segments showing the
> comms between mutli-homed NT server and other devices in a network. Can I
> use editcap or tethereal to combine them in to a single trace file?

No.

However, it might be possible to add to editcap the ability to read more
than one capture file - of the same link-layer encapsulation type - and
write out a single combined file, or to write another program to combine
capture files.

I suspect it should be fairly straightforward; I'll look into it this
evening.