[tcpdump-workers] Multiple interface listening modification

Hi All, I am using libpcap 1.7.3 version and I need to listen multiple interface by same user process call. I am planning to patch libpcap to be able to use a socket array which will be attached different interfaces. So I want to take your reviews about this modification should I design the modif

Re: [tcpdump-workers] Multiple interface listening modification

Thanks for your replies Michal and Guy, The main handicap is using libpcap based user space tools like tcpdump, tcpstat, tshark on my project. If I change Libpcap usages on that user level applications, I must leave the upstreams of that applications so I can not face leaving this much project'

[tcpdump-workers] Fwd: Tcpdump circular ring buffer modification

Hi All, I am using libpcap-1.7.3 version and tcpdump-4.1.1 version. I need to record traffic of an interface. So I am planning to use tcpdump with "-W 6 -G 10" parameters for the last one minute recording. But the tcpdump process exiting after recording sixth pcap file, whereas I need to an endle

[tcpdump-workers] Ringbuf pcap reading and "bogus savefile header" error

Hi all, I have a problem about reading circular ringbuf pcap records. There is a pcap file which stores last X seconds of packets. And with each X seconds of a period, a new pcap file is created. I can successfully read the initial pcap file for X seconds with "tail -n+o -F | tcpdump -r - -nn".