This bug seems to be fixed in the latest upstream - as I can see in ulogd-1.21/pcap/ulogd_PCAP.c (append_create_outfile), zero length and non-existent output file are now handled the same way (by writing the necessary header).
Upstream seems to be actively maintained, while the Debian package is quite old. It is possible that other bugs have been fixed, too. Hope this helps, Marek -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
