[ -C file_size ] [ -W filecount ] tcpdump.orgs tcpdump has the above options so that you can constantly log and yet open a file of a certain time quickly with wireshark.
I am trying to come up with some magic for doing similar with the more secure and in base tcpdump without porting the c so if anyone already does this then please let me know? Thanks, Kc -- _______________________________________________________________________ 'Write programs that do one thing and do it well. Write programs to work together. Write programs to handle text streams, because that is a universal interface' (Doug McIlroy) In Other Words - Don't design like polkit or systemd _______________________________________________________________________