where tcpdump store and it's storage status

Hi William,

You can check directly file, for example if you lunch this command:

tcpdump -nni 0.0 host 1.1.1.1 -w  /var/tmp/file.cap

then regularly check the size of the captured file with this following command:

ls -la /var/tmp/file.cap

It will give you size of packet Up-to-date.

Hope it help you.

regards,