Hi, I think I remember trouble with ring buffers and such with the last few versions of Ethereal/first few versions of Wireshark. I don't think this is solved with the Debian stable version.
Thanx, Jaap On Tue, 14 Nov 2006, Tiago Gomes da Silva Mendo wrote: > Hi > > i'm using tethereal with this command line: > > \_ supervise sonda-tethereal > 1872 ? SN 0:01 | \_ /usr/bin/tethereal -n -q -w > /var/sonda/caps/current/1163502308_cap -a filesize:51200 -b 0:600 -i eth0 ip > proto \tcp and (host ip1 or host ip2 or host ip3 (etc) ) or arp > > the problem is that when there's no packets matching the capture file is > wrote with 0 bytes instead of the normal file with 24 bytes and zero packets. > > > # dpkg -l tethereal* libpcap* > Desired=Unknown/Install/Remove/Purge/Hold > | Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed > |/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: > uppercase=bad) > ||/ Name Version > Description > +++-======================================-======================================-============================================================================================ > ii tethereal 0.10.10-2sarge9 > network traffic analyzer (console) > un libpcap-dev <none> > (no description available) > un libpcap-ruby <none> > (no description available) > un libpcap-ruby1.6 <none> > (no description available) > ii libpcap-ruby1.8 0.6-5 > libpcap interface for scripting language Ruby 1.8 > ii libpcap0.7 0.7.2-7 > System interface for user-level packet capture > un libpcap0.7-dev <none> > (no description available) > ii libpcap0.8 0.8.3-5 > System interface for user-level packet capture > pn libpcap0.8-dev <none> > (no description available) > # > > # uname -a > Linux pulso-dc-041 2.6.10power-edge-2850-750 #1 SMP Fri Feb 25 10:36:50 WET > 2005 i686 GNU/Linux > # > > > any ideas? > > > > > > Tiago Gomes da Silva Mendo > > e-mail: [EMAIL PROTECTED] > PT Comunica??es/DRI/RTS (Direc??o de Risco T?cnico e Seguran?a) > > Urbaniza??o Tagus Park Lote 35 Torre 3 Piso 0 > 2784-549 Porto Salvo > Tel: +351 21 501 9147 > > >
_______________________________________________ Wireshark-users mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-users
