On Dec 6, 2016, at 10:12 PM, Tugrul Erdogan wrote:
> There is a pcap file which stores last X seconds of packets. And with each
> X seconds of a period, a new pcap file is created.
>
> I can successfully read the initial pcap file for X seconds with "tail -n+o
> -F | tcpdump -r - -nn".
To quo
Hi all,
I have a problem about reading circular ringbuf pcap records.
There is a pcap file which stores last X seconds of packets. And with each
X seconds of a period, a new pcap file is created.
I can successfully read the initial pcap file for X seconds with "tail -n+o
-F | tcpdump -r - -nn".
