Hello Mike,
Netsniff-NG doesn't have a daemon mode. ``-D'' does something very
different, from man:
-D, --dump-pcap-types
Dump all available pcap types with their capabilities and magic
numbers that can be used with option "-T" to stdout and exit.
Background the process using your shell's job control or have it managed
via upstart, systemd, etc.
On Mon, Aug 25, 2014 at 10:42 AM, TOoSmOotH <[email protected]> wrote:
> Having an issue getting netsniff-ng to run in daemon mode.
>
> When I run this everything runs great:
>
> netsniff-ng -i eth1 -o /nsm/pcap/ -s --prefix snort.log. --verbose
> --ring-size 50MiB --interval 50MiB
>
> When I run it this way to drop it into daemon mode I get this:
>
> netsniff-ng -i eth1 -o /nsm/pcap/ -s --prefix snort.log. --verbose
> --ring-size 50MiB --interval 50MiB -D -P /var/run/netsniff-ng.pid -L
> /var/log/netsniff-ng.log -S /tmp/netsniff-ng.uds
>
> tcpdump-capable pcap:
>
> magic: 0xa1b2c3d4 (swapped: 0xd4c3b2a1)
>
> features:
>
> timeval in us
>
> packet length
>
> packet cap-length
>
> tcpdump-capable pcap with ns resolution:
>
> magic: 0xa1b23c4d (swapped: 0x4d3cb2a1)
>
> features:
>
> timeval in ns
>
> packet length
>
> packet cap-length
>
> Alexey Kuznetzov's pcap:
>
> magic: 0xa1b2cd34 (swapped: 0x34cdb2a1)
>
> features:
>
> timeval in us
>
> packet length
>
> packet cap-length
>
> packet ifindex
>
> packet protocol
>
> packet type
>
> netsniff-ng pcap:
>
> magic: 0xa1e2cb12 (swapped: 0x12cbe2a1)
>
> features:
>
> timeval in ns
>
> timestamp source
>
> packet length
>
> packet cap-length
>
> packet ifindex
>
> packet protocol
>
> hardware type
>
> packet type
>
> Then it just exits. Any ideas? Am I missing something simple here?
>
> Thanks
>
> Mike
>
> --
> You received this message because you are subscribed to the Google Groups
> "netsniff-ng" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.
>
--
Jon Schipp,
jonschipp.com, sickbits.net
--
You received this message because you are subscribed to the Google Groups
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
