I've added support to tcpdump that lets you do things like: find /pcaps -type f | tcpdump -V - -w out.pcap
or: find /pcaps -type f > ~/pcaps; tcpdump -V ~/pcaps -w out.pcap When writing out to a file it makes sure the DLT of every subsequent file matches the DLT of the first file. It's in a fork on github. I'd appreciate any comments on it before I issue a pull request. https://github.com/wxsBSD/tcpdump/commits/master Yes, I realize there are other tools out there to do this but I don't see why it shouldn't be in tcpdump. It's far more ubiquitous than the others. -- WXS _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers