tracemerge is a libtrace tool that will merge together two (or more) traces into a single trace file.

Usage

tracemerge [ -i | --set-interface ] [ -u | --unique-packets ] outputuri inputuri...

Options

-i, --set-interface

Replace the direction/interface bit in the format header based on which input trace the packet comes from, e.g. direction is 0 for packets from the first input file, 1 for packets from the second file, etc.

-u, --unique-packets

Ignore duplicate packets with identical timestamps

Applications

Concatenating Traces

tracemerge erf:merged_trace.gz erf:small_traces-*.gz

Merging two directions back into a single trace

tracemerge -i erf:merged_trace.gz erf:outcoming.gz erf:incoming.gz

Note: most libtrace applications regard a direction of 0 as outgoing and a direction of 1 as incoming, so be sure to specify the input URIs the correct way around

Notes

tracemerge always produces traces where the packets are in timestamp order