MERGECAP(1) MERGECAP(1) (NAME) mergecap - (SYNOPSIS) mergecap [ -a ] [ -F ] [ -I ] [ -s ] [ -V ] [ --no-merging-comment ] -w |- [ ...] mergecap -h|--help mergecap -v|--version (DESCRIPTION) Mergecap -w . Mergecap pcap pcapng tcpdump Wireshark . Mergecap pcapng . Mergecap Wireshark . gzip zstd lz4 . << (DESCRIPTION)>> wireshark(1) Wireshark Mergecap . Mergecap . -F mergecap -F . -a . Mergecap . -a . . WTAP_ENCAP_PER_PACKET . pcap WTAP_ENCAP_PER_PACKET . ..SH " (OPTIONS)" -a . -a . : mergecap . -F . Mergecap mergecap -F . pcapng . -h|--help . -I << >> (Interface Description Block IDB) . mergecap -I IDB . IDB . . mergecap IDB . . : none: IDB IDB . all: IDB IDB IDB . ( IDB . IDB IDB .) . any: IDB IDB . IDB . -s (snapshot length) . -s . ( snoop Solaris 2.5.1 Solaris 2.6 Ethernet MTU Ethernet jumbo frames gigabit Ethernet ). -v|--version . -V mergecap . -w |- . '-' stdout . --compress ( ) '.gz' gzip . . --compress type . --compress . outfile . --no-merging-comment "File created by merging:..." . () . . --log-level . "noisy" "debug" "info" "message" "warning" "critical" "error". "warning" "warning" "critical" "error" "noisy" . . --log-fatal . "warning" "warning" "critical" "error" . --log-fatal-count (fatal) . --log-domains "GUI,Epan,sshdump". . "!" ( ). --log-debug "debug" . . "!" ( ). --log-noisy "noisy" . . "!" ( ). --log-fatal-domains . . --log-file stderr . (EXAMPLES) . : capinfos -aeS a.pcap b.pcap 00:00:00 UTC . a.pcap 1009932757 b.pcap 873660281 b.pcap a.pcap : 1009932757 - 873660281 - 100 = 136272376 . : editcap -t 136272376 b.pcap b-shifted.pcap b.pcap . : mergecap -w compare.pcap a.pcap b-shifted.pcap a.pcap b.pcap compare.pcap ..SH " (SEE ALSO)" pcap(3) wireshark(1) tshark(1) dumpcap(1) editcap(1) text2pcap(1) pcap-filter(7) tcpdump(8) (NOTES) Mergecap editcap Richard Sharpe Guy Harris . Mergecap 4.7.3 . Mergecap Wireshark . Wireshark : . HTML Wireshark : . (AUTHORS) Scott Renfro Bill Guyton 2026-09-03 MERGECAP(1)