Introduction to Ethereal (v.0.9.9), The Open Source Network-Protocol Analyzer

32
Ethereal
...Tracing for indefinite periods
Ring buffer example:
Run tethereal for an indefinite period, using four 1-Mb ring
buffers:
$ tethereal –a filesize:1024 –b 4 –w eth.out
• terminate with [Ctrl] [C], or from shell script with
kill -s INT tethereal_process_id
• do not terminate with kill -s KILL (signal 9)
• output (note: file 1 reused—has most recent mtime):
$ ll –rt eth*
-rw------- 1 root sys 1024897 Mar 22 16:53 eth_00002_20050322165358.out
-rw------- 1 root sys 1025096 Mar 22 16:53 eth_00003_20050322165359.out
-rw------- 1 root sys 1025100 Mar 22 16:54 eth_00004_20050322165359.out
-rw------- 1 root sys 485822 Mar 22 16:54 eth_00001_20050322165400.out