Re: How to cut capture by duration

[Guy Harris <guy () alum mit edu>]

On Jan 5, 2006, at 12:30 AM, zze-DALMASSO Cedric RD-BIZZ-SOP wrote:

> I look for a means to make a capture at long time. But it's  
> impossible since the file's size grow up.
> Do you know a means to cut it by duration, for example each hour a  
> new file (it's simpler to use file with duration cut rather than  
> size cut)?

Yes, but it only works with the "current tar files" version of  
tcpdump, not with any version that's been released - the "-G" flag  
can be used to switch capture files after some amount of time has  
expired.

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.