joincap
joincap copied to clipboard
Limit on merged file
There can also be a limit of number of packets that can be merged or limit on size of merged file i.e merged file should not be greater then specified limit
What do you mean, that you want to add a feature to limit the number of files and the number of packets per file?
By limit i mean eg: file1.pcap -> 5 packets file2.pcap -> 5 packets joincap file1.pcap file2.pcap -o merged.pcap -limit 7 merged.pcap should have 7 packets instead of 10 packets
I think this should work:
joincap -w - file1.pcap file2.pcap | editcap -r /dev/stdin out.pcap 1-7
I was thinking of something inbuilt in joincap
Raised a pr for this https://github.com/assafmo/joincap/pull/9