diff options
author | Whang Choi <wch0x01@gmail.com> | 2018-11-30 19:31:54 -0500 |
---|---|---|
committer | Tobias Klauser <tklauser@distanz.ch> | 2018-12-02 17:26:52 +0100 |
commit | 04b3fe157db3e3aa22caf632928d5f06aa3f88bd (patch) | |
tree | fcd32379141cf3248614c53af565aa3ff9a90975 /netsniff-ng.8 | |
parent | e313a5415241cd2b0a81ae4ac55a53b36ab153ff (diff) |
netsniff-ng: implement rotating capture files
Add a new option -O, --overwrite which allows to rotate capture files.
The timestamp in the file name is replaced with a number that wraps
around after reaching the specified number of files.
Example usage:
netsniff-ng -s -F 1KiB -O 10 -i eth0 -o /output/folder
Fixes #147
Signed-off-by: Whang Choi <wch0x01@gmail.com>
Signed-off-by: Tobias Klauser <tklauser@distanz.ch>
Diffstat (limited to 'netsniff-ng.8')
-rw-r--r-- | netsniff-ng.8 | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/netsniff-ng.8 b/netsniff-ng.8 index c937978..e4cc14b 100644 --- a/netsniff-ng.8 +++ b/netsniff-ng.8 @@ -175,6 +175,12 @@ Process a number of packets and then exit. If the number of packets is 0, then this is equivalent to infinite packets resp. processing until interrupted. Otherwise, a number given as an unsigned integer will limit processing. .TP +.B -O <N>, --overwrite <N> +A number from 0 to N-1 will be used in the file name instead of a Unix +timestamp. The previous file will be overwritten when number wraps around. The +maximum value is 2^32 - 1. Intended for rotating capture files when used +with options \fB\-F\fP and \fB\-P\fP. +.TP .B -P <name>, --prefix <name> When dumping pcap files into a folder, a file name prefix can be defined with this option. If not otherwise specified, the default prefix is \[lq]dump\-\[rq] |