In this lecture we will learn how to merge multiple Wireshark files into one.
Merging files is a useful feature which allows you to merge contents of multiple files into one.
There are two methods to merge files.
I will show you both.
So let's start with the first method.
So the first thing that you have to do is open the file that you want to merge with another file.
So go to the file open.
Now I'm going to merge contents or packets of these two files, three way handshake and a dummy.
So let me click on dummy.
As you can see at the bottom, dummy file has 45 packets and three way handshake file has total three
packets.
Right.
So I'm going to open the dummy file, double click on it or click on open.
As you can see, it has total 45 packets right now in this file, I'm going to merge packets of three
way handshake file.
So go to the file, click on merge.
Down here we have three options pretend packets to the existing file.
This option allows us to add packets at the beginning.
Second option merge packets chronologically it merges packets according to the time stamp.
Then we have last option append packets.
It basically appends packets at the end of the file.
So I'm going to go with the first option.
It will append packets at the beginning.
Now double click on the file that you want to merge.
So I'm going to double click on a three way handshake.
As you can see, guys, a packet from three way handshake file have been added at the beginning.
Right in that file I had this three way handshake in Sinek and EK.
Now we have to save this merge file separately, right?
What Wireshark basically does.
It basically takes contents or packets from both the files, then, you know, merge them and then we
have to save the merged file separately.
Right.
In this way, Wireshark doesn't affect the existing files.
They are not altered.
Right.
So to save this file, go to the file.
Click on Save as now write the file name, merge the click on Save.
As you can see, file has been saved.
Now let me check.
As you can see, both the files are intact, three way handshake and dummy.
Right.
So Wireshark basically took the contents of both the files.
Then, you know, we saved that merged content into this merged file.
Now if you want to merge the contents of another file into this, then you have to repeat the same process.
Go to the file, click on Merge, then select the file and guys feel free to experiment around you.
No remaining options, right?
If you select the last option, then contents will be appended at the end and the middle option merge
package.
Chronologically, it will append the package according to the timestamp.
Right now let me show you another method of merging multiple files into one.
Now, first thing that you have to do is put all the files that you want to merge in a single directory.
Right.
So open the directory.
Now let me resize this window size.
Now we have to select the files, then drag and drop them into the Wireshark.
So press and hold control button.
Now select the files that you want to merge.
I'm going to merge three way handshake.
Remember, this order of merging will be based on your selection.
So I have selected three way handshake.
So contents of three way handshake will be at the beginning.
Then I'm selecting dummy and contents of a dummy will be appended after the contents or packets of three
way handshake.
Then I'm going to select the packets file now drag and drop the selected files into into the Wireshark.
As you can see guys inside the box it is showing three right it means you are merging contents of three
files and now let me drop it.
As you can see at the beginning, we have contents of three way handshake file.
Then I have contents of.
Other two files.
Now we have to save this merged content into a new file.
So go to the file.
Click on Save as merged to click on Save.
As you can see, file has been saved, right?