Hi,
I think I remember trouble with ring buffers and such with the last few
versions of Ethereal/first few versions of Wireshark. I don't think this
is solved with the Debian stable version.
Thanx,
Jaap
On Tue, 14 Nov 2006, Tiago Gomes da Silva Mendo wrote:
> Hi
>
> i'm using tethereal with this command line:
>
> \_ supervise sonda-tethereal
> 1872 ? SN 0:01 | \_ /usr/bin/tethereal -n -q -w /var/sonda/caps/current/1163502308_cap -a filesize:51200 -b 0:600 -i eth0 ip proto \tcp and (host ip1 or host ip2 or host ip3 (etc) ) or arp
>
> the problem is that when there's no packets matching the capture file is wrote with 0 bytes instead of the normal file with 24 bytes and zero packets.
>
>
> # dpkg -l tethereal* libpcap*
> Desired=Unknown/Install/Remove/Purge/Hold
> | Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
> |/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
> ||/ Name Version Description
> +++-======================================-======================================-============================================================================================
> ii tethereal 0.10.10-2sarge9 network traffic analyzer (console)
> un libpcap-dev <none> (no description available)
> un libpcap-ruby <none> (no description available)
> un libpcap-ruby1.6 <none> (no description available)
> ii libpcap-ruby1.8 0.6-5 libpcap interface for scripting language Ruby 1.8
> ii libpcap0.7 0.7.2-7 System interface for user-level packet capture
> un libpcap0.7-dev <none> (no description available)
> ii libpcap0.8 0.8.3-5 System interface for user-level packet capture
> pn libpcap0.8-dev <none> (no description available)
> #
>
> # uname -a
> Linux pulso-dc-041 2.6.10power-edge-2850-750 #1 SMP Fri Feb 25 10:36:50 WET 2005 i686 GNU/Linux
> #
>
>
> any ideas?
>
>
>
>
>
> Tiago Gomes da Silva Mendo
>
> e-mail: tiago.g.mendo@xxxxxxxxxx
> PT Comunica??es/DRI/RTS (Direc??o de Risco T?cnico e Seguran?a)
>
> Urbaniza??o Tagus Park Lote 35 Torre 3 Piso 0
> 2784-549 Porto Salvo
> Tel: +351 21 501 9147
>
>
>