On 06/29/2016 12:10 PM, Tobias Klauser wrote:
On 2016-05-16 at 18:58:21 +0200, Vadim Kochan <[email protected]> wrote:
If all packets did not pass the filter then output pcap
file will be created with pcap header, which might be not what user
expect - to see only interested pcap files.
IMO, an output file should always be created, even if it contains no
packets. Otherwise it's not entirely obvious whether there was an error
in netsniff-ng or whether there just weren't any passed packets. Also,
in case the file can't be created (e.g. due to lacking permissions) and
the first packet to be written only arrives a large amount of time after
program start, the user would only notice by then.
BTW, an empty pcap opens just fine in e.g. Wireshark.
Yeah, agreed.
--
You received this message because you are subscribed to the Google Groups
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
