pcap stream rotation and pruning
- by pilcrow
Some of my servers collect a lot of packet data. Is there a utility (or patch to tcpdump(1)) to log a pcap stream to disk which:
Rotates based on size of data written
Prunes written files, keeping only the N most recent
Does not re-use output filenames
Is self-contained
(Ruling out, e.g., a rotation with external pruning via…