Ask Your Question

Revision history [back]

The result of applying diff to two binary pcap files does not, in general, result in a pcap file.

You'll need to use other tools, e.g. on the Wireshark Wiki Tools list pcap_diff that might help.

You might also consider dumping the pcaps to another format (e.g. text, json, pdml) to then use other diff tools appropriate for that format.