PCAPMERGE(1)

NAME
pcapmerge - Program to merge and extract part of binary capture file.

SYNOPSIS
pcapmerge [ -r file ... ] [ -w output ] [ -s start ] [ -e end | -p period ] bpf filter

DESCRIPTION
pcapmerge can be used to extract part of a binary packet capture file or merge several capture files. It is similar in scope to the tcpslice(1) program.

  OPTIONS

-r, --input
    Specifies the input file to read. You can use this option several times to merge multiple files. Defaults is to read from STDIN.

-w, --output
    Sets the file to which to write the merged/extracted data. Defaults to stdout, which should be redirected to a file or piped to another program.

-s, --start
    Sets the start time. No packets with a timestamp lower than this will be output. Defaults is to output all packets.

    If the Date::Manip(3) module is installed, you can use any format that this module can parse. If that module is'nt installed you must use the following format YYYY-MM-DD HH:MM:SS or any meaningful subset of that format.

-e, --end
    Sets the end time. No packets with a timestamp greater than this will be output. Defaults is to output all packets.

    If the Date::Manip(3) module is installed, you can use any format that this module can parse. If that module is'nt installed you must use the following format YYYY-MM-DD HH:MM:SS or any meaningful subset of that format.

-p, --period
    Specifies the maximum timestamp relative to the starting time.

    If you have the Date::Manip module installed, you can use any format that this module can parse. If that module isn't available, you can use a subset of the following format X weeks X days X hours X mins X secs.

ARGUMENTS
Remaining arguments are interpreted as a tcpdump filter to restrict output to the packets matching the filter. See tcpdump(8) for syntax.

AUTHOR
Copyright (c) 2000 Francis J. Lacoste and iNsu Innovations Inc. All rights reserved.

There is NO warranty. You may redistribute this software under the terms of the GNU General Public License. For more information about these matters, see the file named COPYING.

SEE ALSO
Net::Pcap(3), pcap(3), tcpdump(8)