Re: [tcpdump] Cannot split pcap into big pcaps (#488)

[Michael Richardson <mcr () sandelman ca>]

Jozef Mlich <notifications () github com> wrote:
    > Hi I am trying to split pcap into multiple files with size 100GB with
    > following command:

    > tcpdump -r ./network.pcap -C 100000 -w ./output

    > It seems this doesn't work becuase ndo_Cflag (./netdissect.h and ./
    > interface.h) is defined as int

    > int ndo_Cflag; /* rotate dump files after this many bytes */

    > The value if Cflag is given by following formula (main.c):

    > Cflag = atoi(optarg) * 1000000;

So, you are saying we need to use a 64-bit value here, and maybe
a string conversion function that returns a bigger type.

A tested patch would be most appreciated...

--
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        | network architect  [
]     mcr () sandelman ca  http://www.sandelman.ca/        |   ruby on rails    [




_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers