| Mike Castle 2004-06-17, 5:55 pm |
| In article <pan.2004.06.06.01.30.01.943894@at_nospamz.ucdavis.edu>,
Ryan <rcdetert@at_nospamz.ucdavis.edu> wrote:[vbcol=seagreen]
Ethereal (or rather tethereal) can do this using the built in options of -a
and -b.
So, you could set it up to rotate files every 5 minutes or every 1MB,
whichever came first.
Also, since tethereal can put the files back into one larger file, you
could have a sliding window of the last 15 minutes or something like that,
and use tools like tcpflow to extract specific streams.
mrc
--
Mike Castle dalgoda@ix.netcom.com www.netcom.com/~dalgoda/
We are all of us living in the shadow of Manhattan. -- Watchmen
fatal ("You are in a maze of twisty compiler features, all different"); -- gcc
|