Thanks for the answers. I tried to limit the pcap file size to 100MB by setting the option to be --interval 100MiB, however, I saw most of the pcap files were created at the size around 170MB to 200MB. Is this the expected behavior?
Thanks, Allen On Mon, Aug 12, 2013 at 10:58 AM, Daniel Borkmann <[email protected]>wrote: > On 08/12/2013 04:55 PM, [email protected] wrote: > [...] > > (From the document > https://help.ubuntu.com/**community/Netsniff-NG<https://help.ubuntu.com/community/Netsniff-NG> >> ) >> >> Is the following command still valid? >> > > Yep, it is. > > > ---------------- >> Drop privileges to uid 1000 and write a new capture file to the current >> directory after every 10GB of traffic. >> >> netsniff-ng --in eth0 --out . --interval 10GiB --user 1000 --group 1000 >> >> > -- > You received this message because you are subscribed to the Google Groups > "netsniff-ng" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to > netsniff-ng+unsubscribe@**googlegroups.com<netsniff-ng%[email protected]> > . > For more options, visit > https://groups.google.com/**groups/opt_out<https://groups.google.com/groups/opt_out> > . > > > -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
