On 2016-05-16 at 18:58:21 +0200, Vadim Kochan <[email protected]> wrote: > If all packets did not pass the filter then output pcap > file will be created with pcap header, which might be not what user > expect - to see only interested pcap files.
IMO, an output file should always be created, even if it contains no packets. Otherwise it's not entirely obvious whether there was an error in netsniff-ng or whether there just weren't any passed packets. Also, in case the file can't be created (e.g. due to lacking permissions) and the first packet to be written only arrives a large amount of time after program start, the user would only notice by then. BTW, an empty pcap opens just fine in e.g. Wireshark. -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
