Steve Bonds
2003-Apr-14 12:12 UTC
[tcpdump-workers] TCPDump is truncating output file if italready exists..
On Sun, 13 Apr 2003, Guy Harris gharris-at-sonic.net |TCPdump Workers| wrote:> It is probably not impossible to add a "pcap_dump_open_append()" > function to libpcap that would do that, and, given that function, one > could probably add a new command-line flag to get tcpdump to append to > a capture file rather than truncating and overwriting it.That would be very handy, but I'm not going to hold my breath waiting for it. In the meantime, try the "tcpslice" utility included with tcpdump to split and merge raw packet capture files. -- Steve Bonds
Reasonably Related Threads
- IP Filters and Firewalls:Summary of Source Info
- tcpdump:libpcap:compilation problem
- CESA-2005:421 Moderate CentOS 3 x86_64 tcpdump - security update
- CESA-2007:0387 Moderate CentOS 4 s390(x) tcpdump - security update
- Updated tcpdump package fixes various vulnerabilities