[netsniff-ng] Re: [PATCH] netsniff-ng: Create out pcap only if first packet passed

2016-06-29 Thread Daniel Borkmann
On 06/29/2016 12:10 PM, Tobias Klauser wrote: On 2016-05-16 at 18:58:21 +0200, Vadim Kochan wrote: If all packets did not pass the filter then output pcap file will be created with pcap header, which might be not what user expect - to see only interested pcap files. IMO, an output file should

[netsniff-ng] Re: [PATCH] netsniff-ng: Create out pcap only if first packet passed

2016-06-29 Thread Tobias Klauser
On 2016-05-16 at 18:58:21 +0200, Vadim Kochan wrote: > If all packets did not pass the filter then output pcap > file will be created with pcap header, which might be not what user > expect - to see only interested pcap files. IMO, an output file should always be created, even if it contains no p

[netsniff-ng] Re: [PATCH] netsniff-ng: Create out pcap only if first packet passed

2016-06-29 Thread Vadim Kochan
On Mon, May 16, 2016 at 7:58 PM, Vadim Kochan wrote: > If all packets did not pass the filter then output pcap > file will be created with pcap header, which might be not what user > expect - to see only interested pcap files. > > Signed-off-by: Vadim Kochan > --- > netsniff-ng.c | 33 ++