Is it possible to index PCAP as it writes it to disk? I really like netsniff-ng as it scales well with high traffic but the downside to that is a lot of pcap. This means searching through the pcap takes a long time especially when there are lots of writes going on.
Thanks! --
