Wireshark's (cache) mergecap can only write files to 2GB (no LARGEFILE support).
The error usually is:
mergecap: Error writing to outfile: Less data was written than was requested
A post on the Ubuntu bugtracker (cache) has a workaround: simply write to stdout and pipe the output into a file:
mergecap -w - *.pcap > merged.pcap
The error usually is:
mergecap: Error writing to outfile: Less data was written than was requested
A post on the Ubuntu bugtracker (cache) has a workaround: simply write to stdout and pipe the output into a file:
mergecap -w - *.pcap > merged.pcap