Merged pcaps not opening

Aug 13, 2012 at 4:15 PM

When i try to read a pcap file that was created from "mergecap" I get a "bad dump file format" error. Has anyone had the same problem reading merged pcaps, if so how did you resolve?

Aug 13, 2012 at 4:40 PM

Problem resolved! Merged file was named *.pcap but internally was not in pcap format.

Dec 18, 2012 at 5:24 AM

So did you find what is the format you need to specify for "mergecap" to generate the real tcpdump format output?