Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

3
  • This will not work when we want to read from multiple files, what will be the solution for tcpdump -l -r file1,file2 e.g. ? tail -c +1 -f file1 -f file2 | tcpdump -l -r - will not work since tail will output some extra lines while tailing multiple files Commented Apr 9, 2021 at 13:14
  • 1
    @Dipto I guess you could simply two or more of these pipe command lines in backround. ( tail -c +1 -f a.pcap | tcpdump -l -r - & tail -c +1 -f b.pcap | tcpdump -l -r - & ) Commented Apr 13, 2021 at 23:08
  • Thanks. But what I found is tcpdump -r /Path/to/pcap is able to follow the file in realtime as it is. May be OP is facing another problem superuser.com/questions/735017/… Commented Apr 16, 2021 at 11:58