On 02/23/2013 09:03 PM, [email protected] wrote:
Hi everybody,
here is the command I use to capture packets
netsniff-ng --dev eth2 --ring-size 50MB -H
works great but after the 50MB the console stop displaying new results.
I would like a way to capture infinitely, I mean having netsniff capture things
night and days. (I use an external program to capture the output).
how should I do ?
1. You should not let the output be printed, i.e. use netsniff-ng
in --silent mode
2. After X MiB/GiB, you should netsniff-ng let start a new pcap trace
that you can then analyze, e.g.
netsniff-ng --in eth0 --out /opt/dump/ -s -m --interval 1GiB -b 0
For more examples, have a look at, e.g.:
http://pub.netsniff-ng.org/paper/devconf_2013.pdf
--
You received this message because you are subscribed to the Google Groups
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
