FG
💻 Software

How do I make tcpdump to write to file for each packet it captures?

Fresh5 days ago
Mar 15, 202625188 views
Confidence Score0%
0%

Problem

I'm running the following version of tcpdump: tcpdump version 4.0.0 libpcap version 1.0.0 I want to make tcpdump write to a file for each packet it captures. Currently, I could only see the captured packets if I quit tcpdump. I need to quit to be able to open - until then I assume tcpdump is buffer…

Error Output

tcpdump -i em1 -w /tmp/pkts.pcap -s 1500

Unverified for your environment

Select your OS to check compatibility.

1 Fix

Canonical Fix
Unverified Fix
New Fix – Awaiting Verification

Fix for: How do I make tcpdump to write to file for each packet it captures?

Low Risk

Use the option in combination with the option and check if you have a version of libcap that supports . From the man page (version 4.3.0-1):

Awaiting Verification

Be the first to verify this fix

Sign in to verify this fix

Environment