Mark, I tried something and it seems to work now.
I created the file /data/capture_rotate_`date +%Y_%m_%d`.pcap2 first and changed its permission to how you suggested prior to running tcpdump and it started working properly. I picked 65535 so I can capture the everything. Though it should be the default, I just wanted to make sure that it is what I am capturing. Thanks you for the help. :) jerome On Mon, Feb 6, 2012 at 7:58 AM, Mark W. Jeanmougin <[email protected]> wrote: > Hey Jerome, > > I should've been more specific. I wanted to see permissions and ownership on > the files created by tcpdump. How about: > > tcpdump -i eth0 -s 65535 -w /data/capture_rotate_`date +%Y_%m_%d`.pcap1 > > tcpdump -i eth0 -s 65535 -w /data/capture_rotate_`date +%Y_%m_%d`.pcap2\ > -C 4 > > ls -al /data/ > > Also, I tend to do '-s 0'. Why did you pick 65535, anyway? I'm struggling on > that one... > > Thanks, > > MJ > - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
