i have file with dlt_user interface and some with regular ethernet interface
I successfully merged files with dlt user interface with wireshark
But when i try to merge with mergecap packet with dlt_user interface disappear.
Is it supposed to be supported?
If Wireshark can successfully merge the files but mergecap can't, then there may be a bug in mergecap. I'd recommend filing a bug on the Wireshark Bug Tracker and attaching 2 sample capture files that can be successfully merged in Wireshark but that fail to be merged with mergecap.
Before filing a bug, you should make sure you're using the latest version of Wireshark, currently 3.2.5, in case this was a known bug that has already been fixed. You might want to include your Wireshark version information from Wireshark's Help -> About Wireshark -> Copy To Clipboard when you report problems here, but certainly do so if you open a bug for this.
Asked: 2020-07-09 08:06:52 +0000
Seen: 213 times
Last updated: Jul 10 '20
Have you looked at the
mergecapman page for rules on handling encapsulation type?