Hello List!

 

I am running two tshark process, both capturing on the same interface but
with different Capture filters. Both the tshark instances are writing on to
different files.

 

I am sending SIGINT signal periodically every 60 minutes to both the tshark
processes (I first identify their PIDs and then send kill -SIGINT pid1 pid2)

 

pid1 is the process Id of the tshark that was started first and pid2 is the
process Id of tshark that was started later. I have modified the source code
such that whenever a tshark process gets a SIGINT signal, the capture file
to which it is writing will be switched to the next file.

 

When I execute 'kill -SIGINT pid1 pid2' the SIGINT signal is only received
by the tshark with process id pid1. (This I can confirm by seeing the
capture file to which pid1 is writing to is switched and the capture file to
which pid2 is writing to is not changed.)

 

When I execute 'kill -SIGINT pid2' , the SIGINT signal is NOT received by
the tshark with process Id pid2, instead it is received by the pid1. This is
very strange!

 

Is this a BUG in tsahrk ? or is this how tshark, when run on multiple
instances, behaves? Is there any work around to solve this problem?

 

Can you please help me out to solve this issue?

 

 

Many Thanks,

Purandhar

 

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:[email protected]?subject=unsubscribe

Reply via email to