Do you know how to read a pcap file continuously?

[Carter Bullard]

Hey Jim,
Oh, all opinions matter !!!   Since I have no personal use for this feature, I should be the last one to make a suggestion.  

And responding to Harry's email, while having a guide is really great, I have absolutely no time to find out what Perl does, so someone needs to describe it if we're going to make it work.

One good thing though, the prototype does work, and I can see how some people would like it.

Carter

On Sep 18, 2013, at 10:21 AM, "James A. Robinson" <jimr at highwire.stanford.edu> wrote:

> On Wed, Sep 18, 2013 at 10:14 AM, Carter Bullard <carter at qosient.com> wrote:
>> Rather than thinking about implementaion, I think it is more important to decribe the features.  So should we exit if the file goes away ???
> 
> My opinion: no, it should not exit if the filename disappears,
> but that it should warn if it detects the inode has changed or if the
> file got truncated; that it should reopen the file in those situations.
> I believe that's how tail operates and I think that make sense.
> 
> But hey, I'm not the guy who was originally asking for the feature,
> so my opinion isn't that important. :D
> 
> Jim
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130918/ce01b205/attachment.html>