Tcpdump to usb drive

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP












-1















Packets are being generated at 750 packets/second and I am using tcpdump to capture these packets and write them to file stored in a usb drive. Due to write speed limitations, the overall process of packet capture -> write to file takes a longer time. I would like to know what happens when I use Ctrl+C to terminate the tcpdump process. Will it write the captured packets to the file and then exit or will it immediately exit without writing the remaining captured packets to the file ?
Thanks.










share|improve this question


























    -1















    Packets are being generated at 750 packets/second and I am using tcpdump to capture these packets and write them to file stored in a usb drive. Due to write speed limitations, the overall process of packet capture -> write to file takes a longer time. I would like to know what happens when I use Ctrl+C to terminate the tcpdump process. Will it write the captured packets to the file and then exit or will it immediately exit without writing the remaining captured packets to the file ?
    Thanks.










    share|improve this question
























      -1












      -1








      -1


      1






      Packets are being generated at 750 packets/second and I am using tcpdump to capture these packets and write them to file stored in a usb drive. Due to write speed limitations, the overall process of packet capture -> write to file takes a longer time. I would like to know what happens when I use Ctrl+C to terminate the tcpdump process. Will it write the captured packets to the file and then exit or will it immediately exit without writing the remaining captured packets to the file ?
      Thanks.










      share|improve this question














      Packets are being generated at 750 packets/second and I am using tcpdump to capture these packets and write them to file stored in a usb drive. Due to write speed limitations, the overall process of packet capture -> write to file takes a longer time. I would like to know what happens when I use Ctrl+C to terminate the tcpdump process. Will it write the captured packets to the file and then exit or will it immediately exit without writing the remaining captured packets to the file ?
      Thanks.







      ubuntu tcpdump






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Feb 9 at 19:42









      AbhilashAbhilash

      1




      1




















          1 Answer
          1






          active

          oldest

          votes


















          0














          Hitting Ctrl-C results in the signal SIGINT being sent to the process. I believe it is up to the shell what happens after that so you should not depend on anything.



          But your script can trap the signal and then perform tasks defined by you before it exits. Write a function that performs whatever action you want to take. The name doesn't matter. Here I called it cleanup. Then trap SIGINT and have the function called. Like this:



          trap cleanup SIGINT

          cleanup()
          .... # your code here - to be executed after Ctrl+C/SIGINT is received

          exit 1 # <--- make sure you exit, otherwise Ctrl+C will not work anymore


          ... your script here...





          share|improve this answer
























            Your Answer








            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "106"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: false,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: null,
            bindNavPrevention: true,
            postfix: "",
            imageUploader:
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            ,
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );













            draft saved

            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f499679%2ftcpdump-to-usb-drive%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            0














            Hitting Ctrl-C results in the signal SIGINT being sent to the process. I believe it is up to the shell what happens after that so you should not depend on anything.



            But your script can trap the signal and then perform tasks defined by you before it exits. Write a function that performs whatever action you want to take. The name doesn't matter. Here I called it cleanup. Then trap SIGINT and have the function called. Like this:



            trap cleanup SIGINT

            cleanup()
            .... # your code here - to be executed after Ctrl+C/SIGINT is received

            exit 1 # <--- make sure you exit, otherwise Ctrl+C will not work anymore


            ... your script here...





            share|improve this answer





























              0














              Hitting Ctrl-C results in the signal SIGINT being sent to the process. I believe it is up to the shell what happens after that so you should not depend on anything.



              But your script can trap the signal and then perform tasks defined by you before it exits. Write a function that performs whatever action you want to take. The name doesn't matter. Here I called it cleanup. Then trap SIGINT and have the function called. Like this:



              trap cleanup SIGINT

              cleanup()
              .... # your code here - to be executed after Ctrl+C/SIGINT is received

              exit 1 # <--- make sure you exit, otherwise Ctrl+C will not work anymore


              ... your script here...





              share|improve this answer



























                0












                0








                0







                Hitting Ctrl-C results in the signal SIGINT being sent to the process. I believe it is up to the shell what happens after that so you should not depend on anything.



                But your script can trap the signal and then perform tasks defined by you before it exits. Write a function that performs whatever action you want to take. The name doesn't matter. Here I called it cleanup. Then trap SIGINT and have the function called. Like this:



                trap cleanup SIGINT

                cleanup()
                .... # your code here - to be executed after Ctrl+C/SIGINT is received

                exit 1 # <--- make sure you exit, otherwise Ctrl+C will not work anymore


                ... your script here...





                share|improve this answer















                Hitting Ctrl-C results in the signal SIGINT being sent to the process. I believe it is up to the shell what happens after that so you should not depend on anything.



                But your script can trap the signal and then perform tasks defined by you before it exits. Write a function that performs whatever action you want to take. The name doesn't matter. Here I called it cleanup. Then trap SIGINT and have the function called. Like this:



                trap cleanup SIGINT

                cleanup()
                .... # your code here - to be executed after Ctrl+C/SIGINT is received

                exit 1 # <--- make sure you exit, otherwise Ctrl+C will not work anymore


                ... your script here...






                share|improve this answer














                share|improve this answer



                share|improve this answer








                edited Feb 9 at 23:09









                jiwopene

                1407




                1407










                answered Feb 9 at 20:53









                ArjenArjen

                686




                686



























                    draft saved

                    draft discarded
















































                    Thanks for contributing an answer to Unix & Linux Stack Exchange!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid


                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.

                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f499679%2ftcpdump-to-usb-drive%23new-answer', 'question_page');

                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown






                    Popular posts from this blog

                    Peggy Mitchell

                    Palaiologos

                    The Forum (Inglewood, California)