| 8 | | '''Note''': that the {{{pcapfile:}}} output specifier by defaults outputs compressed pcap files (which tcpdump can't natively understand). Use {{{tcpdump -r <(zcat auck4-20010220-210122-0.pcap.gz)}}} to read these files. |
| | 8 | '''Note''': The {{{pcapfile:}}} output specifier by defaults outputs compressed pcap files (which tcpdump can't natively understand). Use {{{tcpdump -r <(zcat auck4-20010220-210122-0.pcap.gz)}}} to read these files. |
| | 9 | |
| | 10 | '''Note 2''': Instead of converting to pcap you can use libtrace directly to access these files and enjoy the benefits of file format, link and network layer independance, a high level API, and transparent fast decompression/compression. |
