Daniel Goolsby wrote:
not sure, they're binary files.
In the specific type of merging you're doing, which is just
concatenation, if the capture files are all libpcap files, you could,
for files 2 through N, strip off the 20-byte file header from the file
and append it to the first file. That could be done with the aid of dd
and cat), for example:
for i in {files 2 through n}
do
(dd bs=20 count=1; cat) <$i >>the_first_file
done
in the Bourne shell or a compatible shell (Korn, Bourne-again, etc.).
However, whether you'd be able to read the resulting file, either with
tcpdump or *shark, is another matter, as per my other mail.
