[ -C file_size ]
[ -W filecount ]
tcpdump.orgs tcpdump has the above options so that you can constantly
log and yet open a file of a certain time quickly with wireshark.
I am trying to come up with some magic for doing similar with the more
secure and in base tcpdump without porting the c so if anyone already
does this then please let me know?
Thanks, Kc
--
_______________________________________________________________________
'Write programs that do one thing and do it well. Write programs to work
together. Write programs to handle text streams, because that is a
universal interface'
(Doug McIlroy)
In Other Words - Don't design like polkit or systemd
_______________________________________________________________________