Re: gzip and tcpdump...

[Darren Reed <darrenr () reed wattle id au>]

In some email I received from Guy Harris, sie wrote:
> On Tue, Feb 25, 2003 at 03:12:30PM -0500, Matt Bing wrote:
> > rmkml said:
> > > Why gzip is not included in tcpdump ?
> >
> > gzcat works like a charm:
> >
> > $ gzcat mypcap.gz | tcpdump -nr -
> > 16:00:30.403793 10.2.2.240.21 > 172.16.2.130.33560: . ack 1238 win 31740 <nop,nop,timestamp 285487358 52170951> 
> > (DF) [tos 0x10]
>
> ....but not on output:
>
>       tcpdump -w - | gzcat
>
>       hostname$ tcpdump -w - | gzcat

What you're looking for yere is:

tcpdump -w - | gzip -c > foo.tcpdump.gz

Darren
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe