FYI, the command below just give me a Permission Denied error and does not create any files.
tcpdump -i eth0 -s 65535 -w /data/capture_rotate_`date +%Y_%m_%d`.pcap2 -C 4 jerome On Mon, Feb 6, 2012 at 8:09 AM, Jerome Yanga <[email protected]> wrote: > Mark, > > I tried something and it seems to work now. > > I created the file /data/capture_rotate_`date +%Y_%m_%d`.pcap2 first > and changed its permission to how you suggested prior to running > tcpdump and it started working properly. > > I picked 65535 so I can capture the everything. Though it should be > the default, I just wanted to make sure that it is what I am > capturing. > > Thanks you for the help. :) > > jerome > > On Mon, Feb 6, 2012 at 7:58 AM, Mark W. Jeanmougin > <[email protected]> wrote: >> Hey Jerome, >> >> I should've been more specific. I wanted to see permissions and ownership on >> the files created by tcpdump. How about: >> >> tcpdump -i eth0 -s 65535 -w /data/capture_rotate_`date +%Y_%m_%d`.pcap1 >> >> tcpdump -i eth0 -s 65535 -w /data/capture_rotate_`date +%Y_%m_%d`.pcap2\ >> -C 4 >> >> ls -al /data/ >> >> Also, I tend to do '-s 0'. Why did you pick 65535, anyway? I'm struggling on >> that one... >> >> Thanks, >> >> MJ >> - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
