tcpdump mailing list archives
Re: [tcpdump] Cannot split pcap into big pcaps (#488)
From: Michael Richardson <mcr () sandelman ca>
Date: Sat, 07 Nov 2015 14:36:56 +0900
Jozef Mlich <notifications () github com> wrote: > Hi I am trying to split pcap into multiple files with size 100GB with > following command: > tcpdump -r ./network.pcap -C 100000 -w ./output > It seems this doesn't work becuase ndo_Cflag (./netdissect.h and ./ > interface.h) is defined as int > int ndo_Cflag; /* rotate dump files after this many bytes */ > The value if Cflag is given by following formula (main.c): > Cflag = atoi(optarg) * 1000000; So, you are saying we need to use a 64-bit value here, and maybe a string conversion function that returns a bigger type. A tested patch would be most appreciated... -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | network architect [ ] mcr () sandelman ca http://www.sandelman.ca/ | ruby on rails [ _______________________________________________ tcpdump-workers mailing list tcpdump-workers () lists tcpdump org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
Current thread:
- Re: [tcpdump] Cannot split pcap into big pcaps (#488) Michael Richardson (Nov 06)