And with each X seconds of a period, a new pcap file is created. I can successfully read the initial pcap file for X seconds with "tail -n+o -F <filename> | tcpdump -r - -nn". But when the pcap file is rotated, the new pcap file causes to "bogus savefile header" from lib...
Jul 31 08:16:40 ntop ntop[1616]: THREADMGMT[t3033672592]:NPS(/usr/local/var/ntop/tmp.eth2.pcap): pcapDispatch thread running [p1616]Jul 31 08:16:40 ntop ntop[1616]: **ERROR** Reading packets on device 0(/usr/local/var/ntop/tmp.eth2.pcap): 'bogus savefile header'Jul 31 08:...
2 changes: 2 additions & 0 deletions 2 src/pcap-test.hpp Original file line numberDiff line numberDiff line change @@ -19,4 +19,6 @@ void findTCPHeader(struct libnet_tcp_hdr& tcp, const u_char* packet); void findIPHeader(struct libnet_ipv4_hdr& ipv4, const u_char* packet); st...
Displays AFDX header information contained in ntar log file created by Cpcap and CFDX.选择语言:从 到 翻译结果1翻译结果2 翻译结果3翻译结果4翻译结果5 翻译结果1复制译文编辑译文朗读译文返回顶部 包含在由Cpcap和CFDX创建NTAR日志文件显示AFDX头信息。 翻译结果2复制译文编辑译文朗读译文返回顶部 显示在被 ...
it has lines in it, so it will almost certainly do something wrong with the file You could *try* doing tail -F <filename> | tcpdump -r - -nn but I'm not sure even *that* is guaranteed to treat the file as if it were a binary file - which is exactly what a pcap file is....