Hi
i'm using tethereal
with this command line:
\_ supervise
sonda-tethereal
1872 ? SN 0:01 | \_ /usr/bin/tethereal -n -q -w /var/sonda/caps/current/1163502308_cap -a filesize:51200 -b 0:600 -i eth0 ip proto \tcp and (host ip1 or host ip2 or host ip3 (etc) ) or arp
1872 ? SN 0:01 | \_ /usr/bin/tethereal -n -q -w /var/sonda/caps/current/1163502308_cap -a filesize:51200 -b 0:600 -i eth0 ip proto \tcp and (host ip1 or host ip2 or host ip3 (etc) ) or arp
the problem is that
when there's no packets matching the capture file is wrote with 0
bytes instead of the normal file with 24 bytes and zero
packets.
# dpkg -l
tethereal* libpcap*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name Version Description
+++-======================================-======================================-============================================================================================
ii tethereal 0.10.10-2sarge9 network traffic analyzer (console)
un libpcap-dev <none> (no description available)
un libpcap-ruby <none> (no description available)
un libpcap-ruby1.6 <none> (no description available)
ii libpcap-ruby1.8 0.6-5 libpcap interface for scripting language Ruby 1.8
ii libpcap0.7 0.7.2-7 System interface for user-level packet capture
un libpcap0.7-dev <none> (no description available)
ii libpcap0.8 0.8.3-5 System interface for user-level packet capture
pn libpcap0.8-dev <none> (no description available)
#
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name Version Description
+++-======================================-======================================-============================================================================================
ii tethereal 0.10.10-2sarge9 network traffic analyzer (console)
un libpcap-dev <none> (no description available)
un libpcap-ruby <none> (no description available)
un libpcap-ruby1.6 <none> (no description available)
ii libpcap-ruby1.8 0.6-5 libpcap interface for scripting language Ruby 1.8
ii libpcap0.7 0.7.2-7 System interface for user-level packet capture
un libpcap0.7-dev <none> (no description available)
ii libpcap0.8 0.8.3-5 System interface for user-level packet capture
pn libpcap0.8-dev <none> (no description available)
#
# uname
-a
Linux pulso-dc-041 2.6.10power-edge-2850-750 #1 SMP Fri Feb 25 10:36:50 WET 2005 i686 GNU/Linux
Linux pulso-dc-041 2.6.10power-edge-2850-750 #1 SMP Fri Feb 25 10:36:50 WET 2005 i686 GNU/Linux
#
any
ideas?
Tiago
Gomes da Silva Mendo
e-mail: [EMAIL PROTECTED]
PT
Comunicações/DRI/RTS (Direcção de Risco Técnico e Segurança)
Urbanização Tagus Park Lote 35 Torre 3
Piso 0
2784-549 Porto Salvo
Tel:
+351 21 501 9147
_______________________________________________ Wireshark-users mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-users
