# How can I merge tcpdump capture files

**URL:** <https://linux-tips.com/t/how-can-i-merge-tcpdump-capture-files/306>\
**Category:** Network\
**Created:** [November 27, 2015, 9:43am UTC](https://linux-tips.com/t/how-can-i-merge-tcpdump-capture-files/306 "2015-11-27T09:43:43Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Greg](https://linux-tips.com/letter_avatar_proxy/v4/letter/g/71c47a/32.png) [@Greg](https://linux-tips.com/u/Greg)\
**Post date:** [November 27, 2015, 9:43am UTC](https://linux-tips.com/t/how-can-i-merge-tcpdump-capture-files/306/1 "2015-11-27T09:43:43Z")

</div>

Is it possible to merge multiple **tcpdump**.pcap capture files into one big file?

---

<div class="post-metadata">

**Author:** ![Debuser](https://linux-tips.com/letter_avatar_proxy/v4/letter/d/96bed5/32.png) [@Debuser](https://linux-tips.com/u/Debuser)\
**Post date:** [November 27, 2015, 9:47am UTC](https://linux-tips.com/t/how-can-i-merge-tcpdump-capture-files/306/2 "2015-11-27T09:47:44Z")

</div>

It is possible with **mergecap** utility which comes from `wireshark-common` package.

You need to give merged filename with `-w` parameter and other filenames which you want to merge:

```auto
$ mergecap -w merged.pcap file1.pcap file2.pcap file3.pcap

```

See also: [man mergecap](http://manpages.org/mergecap)
