search

assafmo / joincap

Merge multiple pcap files together, gracefully.
MIT License
211 stars 22 forks source link

Limit on merged file #7

Closed AfakTolgi closed 3 months ago

AfakTolgi commented 7 months ago

There can also be a limit of number of packets that can be merged or limit on size of merged file i.e merged file should not be greater then specified limit

assafmo commented 7 months ago

What do you mean, that you want to add a feature to limit the number of files and the number of packets per file?

AfakTolgi commented 6 months ago

By limit i mean eg: file1.pcap -> 5 packets file2.pcap -> 5 packets joincap file1.pcap file2.pcap -o merged.pcap -limit 7 merged.pcap should have 7 packets instead of 10 packets

assafmo commented 6 months ago

I think this should work:

joincap -w - file1.pcap file2.pcap | editcap -r /dev/stdin out.pcap 1-7
AfakTolgi commented 3 months ago

I was thinking of something inbuilt in joincap

AfakTolgi commented 3 months ago

Raised a pr for this https://github.com/assafmo/joincap/pull/9