Re: Feature request: time limits

[Guy Harris <guy () alum mit edu>]

On Oct 20, 2003, at 9:22 AM, Rob Quinn wrote:

>   See patches below for a sample implementation with ualarm

...which isn't necessarily present on all the platforms on which 
tcpdump runs (note that it runs on Windows - the WinDump code is merged 
into the main tcpdump CVS source).

> I followed the SIGTERM/SIGINT
> examples, but the whole think strikes me as questionable.  Is there a 
> chance
> the logfile will be garbled?  Are all of the packets really getting 
> flushed to
> the logfile?

Typically, yes.  There is, however, a risk that if the output stream is 
in the middle of being written to when the signal is delivered, it 
might not be properly flushed.

Ideally, the signal handler should just be able to force the capture 
loop to terminate; there currently isn't a "force the loop to 
terminate" API - I've done some work on implementing one, and should 
probably go back and finish it.

> ps - on the www.tcpdump.org web page, the "archive" link under 
> "Mailing lists"
> only shows emails up to Dec 2002.

Yes.  Michael?

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe