Re: how to read a live changing capture file with a tcpdump or wireshark like with tail for a file.

[Mubeesh ali]

thanks Jason. netcat seems suited for this.  I will check this out.


Best Regards,
Mubeesh


On Wed, Mar 2, 2011 at 8:42 PM, Jason C. Wells j...@speakeasy.net wrote:
 On 03/01/11 08:07, Mubeesh ali wrote:

 Hi ,


 We do wifi troubleshooting and are planning to use kismet for wireless
 captures. It produces a file that will be written into every 300
 secs(configurable value ,we use 30 secs).  While comparing with a
 expensive windows sniffer like Omnipeek   the only disadvantage of
 this free tool is we have to continoulsly do tcpdump -r
 filename.pcap  as the file changes. same with wireshark we need to
 hit the refresh button.

 Is there something equivalent to 'tail' for changing files  for
 reading pcap files ? Appreciate any suggestions.

 netcat?




-- 
Best  Regards,

Mubeesh Ali.V.M
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

how to read a live changing capture file with a tcpdump or wireshark like with tail for a file.

[Mubeesh ali]

Hi ,


We do wifi troubleshooting and are planning to use kismet for wireless
captures. It produces a file that will be written into every 300
secs(configurable value ,we use 30 secs).  While comparing with a
expensive windows sniffer like Omnipeek   the only disadvantage of
this free tool is we have to continoulsly do tcpdump -r
filename.pcap as the file changes. same with wireshark we need to
hit the refresh button.

Is there something equivalent to 'tail' for changing files  for
reading pcap files ? Appreciate any suggestions.

-- 
Best  Regards,
Mubeesh Ali.V.M
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org