files are dumped on disk upon certain conditions (specified in the n2disk 
startup)
- size limited file
- time limited file 
- packets number limited file
Yuri
###############################################
Yuri Francalacci   -   [email protected]   -   http://www.ntop.org
"Simplicity is the ultimate sophistication" - Leonardo da Vinci
###############################################

> On 14 Sep 2015, at 15:40, Jan Grashofer <[email protected]> wrote:
> 
> Thank you for the quick reply!
> 
> The documentations says: "As soon as the dump file is ready, using the 
> utilities provided with n2disk, it is possible to query the index for 
> specific packets [...]" How long does it take until the file is ready after a 
> packet was captured? Are we talking about seconds or are files written 
> periodically (minutes)?
> 
> Thanks,
> Jan
> 
> From: [email protected] 
> <mailto:[email protected]> [[email protected] 
> <mailto:[email protected]>] on behalf of Lorenzo Mangani 
> [[email protected] <mailto:[email protected]>]
> Sent: Monday, September 14, 2015 15:28
> To: [email protected] <mailto:[email protected]>
> Cc: [email protected] <mailto:[email protected]>
> Subject: Re: [Ntop] Live query with n2disk
> 
> Hi Jan,
> 
> Absolutely, you can query a timeline for extraction while its running with 
> npcapextract. 
> 
> Best Regards,
> 
> Lorenzo Mangani
> [email protected] <mailto:[email protected]>
> 
> NL: +31 20 8080468
> US: +1 202 6327227
> IT: +39 075 9696117
> 
> 
> On Mon, Sep 14, 2015 at 3:23 PM, Jan Grashofer <[email protected] 
> <mailto:[email protected]>> wrote:
> Hi,
> 
> is it possible to live query n2disk (i.e. query captures while still running 
> n2disk to record further traffic)?
> 
> Thanks,
> Jan
> 
> _______________________________________________
> Ntop mailing list
> [email protected] <mailto:[email protected]>
> http://listgateway.unipi.it/mailman/listinfo/ntop 
> <http://listgateway.unipi.it/mailman/listinfo/ntop>
> 
> _______________________________________________
> Ntop mailing list
> [email protected] <mailto:[email protected]>
> http://listgateway.unipi.it/mailman/listinfo/ntop 
> <http://listgateway.unipi.it/mailman/listinfo/ntop>
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to