Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Tcpdump -C 1 ignored

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 2 Posters 738 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C Offline
      COOL_M_F
      last edited by

      Hi,

      Im trying to get tcpdump to capture and rotate.

      For testing im trying this:```
      tcpdump -C 1 -W 3 -i em1 -w capture.pcap 'host 10.0.47.1'

      It creates the file capture.pcap0 just fine but it ignores -C 1 option and the file just keeps growing in size instead of rotating between  captute.pcap0, capture.pcap1 and capture.pcap2
      
      It works on both Centos and Linux Mint but not on pfSense
      
      Any ideas?
      1 Reply Last reply Reply Quote 0
      • N Offline
        NOYB
        last edited by

        "The units of file size are millions of bytes (1,000,000  bytes)"

        You probably have but since not mentioned how large the file has gotten?  Have you verified it is larger then the million bytes specified?

        Also since tcpdump is actually part of FreeBSD you might try their forums.
        https://forums.freebsd.org/

        1 Reply Last reply Reply Quote 0
        • C Offline
          COOL_M_F
          last edited by

          First test ran for a couple of minutes, result approx. 500 MB
          I will check out FreeBSD too

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.