Combining the capture files

 

After selecting a file in a directory then all uncompressed files will be shown :

combine Wireshark pcap files

 

The result from the merge is placed in a separate directory with name :

_CapMergeResult_ <date in year month day format> _<time in 24 hour format>

Where the variable parts of the name are :

<date in year month day format> is in the example 20200214 and means 14th of February in 2020.

<time in 24 hour format> is in the example 001128 and means 11 minutes and 28 seconds past midnight.

 

This directory contains the result of the merging operation :

combine Wireshark pcap files

The result is one or more merged PCAP files :

_MERGED_packets_OnDate_ <date of the capture> _part<n>_StartTime_ <start time of the capture> .cap

Where the variable parts of the name are :

<date of the capture> = 20200108 means the capture was done on the 8th January of 2020

<n> : is an index indicating the nth part of the merged output

<start time of the capture>: 14h18 means the capture started on 18 minutes past 2 PM

 

The directory that contains the merged results also contains the logging given in the main window :

combine Wireshark pcap files

 

combine Wireshark pcap files

 

combine Wireshark pcap files

 

Back Back to Online Help