tcpdump mailing list archives

Re: tcpdump: file.pcap0: Permission denied


From: Jerome Yanga <jerome.yanga () gmail com>
Date: Mon, 6 Feb 2012 08:09:12 -0800

Mark,

I tried something and it seems to work now.

I created the file /data/capture_rotate_`date +%Y_%m_%d`.pcap2 first
and changed its permission to how you suggested prior to running
tcpdump and it started working properly.

I picked 65535 so I can capture the everything.  Though it should be
the default, I just wanted to make sure that it is what I am
capturing.

Thanks you for the help.  :)

jerome

On Mon, Feb 6, 2012 at 7:58 AM, Mark W. Jeanmougin
<mark.jeanmougin () cchmc org> wrote:
Hey Jerome,

I should've been more specific. I wanted to see permissions and ownership on
the files created by tcpdump. How about:

tcpdump -i eth0 -s 65535 -w /data/capture_rotate_`date +%Y_%m_%d`.pcap1

tcpdump -i eth0 -s 65535 -w /data/capture_rotate_`date +%Y_%m_%d`.pcap2\
-C 4

ls -al /data/

Also, I tend to do '-s 0'. Why did you pick 65535, anyway? I'm struggling on
that one...

Thanks,

MJ

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: