echo tcpdump date to an output

[bsdnewbie999]

how to echo the output displayed of command "tcpdump -r /var/log/pflog -o -ttt -vv -e -n" to an output file in shell script?

[DutchDaemon]

You mean:

tcpdump -r /var/log/pflog -o -ttt -vv -e -n > /var/log/outputfile or
tcpdump -r /var/log/pflog -o -ttt -vv -e -n >> /var/log/outputfile ?

http://www.google.com/search?q=shell+redirection

[jggimi]

Another option is script(1).

Example:

$ script
Script started, output file is typescript
$ sudo tcpdump -r <whatever>
$ ifconfig <whatever>
$ <whatever>
.
.
.
$ exit
Script done, output file is typescript
$ col -b < typescript > session.log.for.today
$ less session.log.for.today

[bsdnewbie999]

This is my script

#!/bin/ksh
#

#Reading file
read ANSWER?"Enter location file to read: "

#check source file
if [[ ! -f $ANSWER ]]
then
        print "$ANSWER: File not found or not accessible, make sure your enter t
he right path."
        exit 1
else
        #Name the output file
        read OUTPUT?"Give a name to the output file: "

        #write to file
        echo $(tcpdump -r $ANSWER -o -ttt -vv -e -n) > $OUTPUT
fi

~

when i open the output file, all the data are printed in 1 line...

[bsdnewbie999]

I think the problem could be the exec command of my previous work.

exec 0<$ANSWER

How do i make it back to normal?

[anomie]

Originally Posted by bsdnewbie999

how to echo the output displayed of command "tcpdump -r /var/log/pflog -o -ttt -vv -e -n" to an output file in shell script?

Also see tcpdump(1)'s -w option.

[IdOp]

echo $(tcpdump -r $ANSWER -o -ttt -vv -e -n) > $OUTPUT

I believe the echo $( ... ) construct is causing the single line, as the shell is removing any newlines in echo's argument. I'm not sure why you want that construct there, but I'd try removing it entirely. Just keep the command ... you want the standard output from.

[bsdnewbie999]

I tried to do it in a sample text file. I use awk to sort the text file and echo to an output file. When i check the output file it doesn't print in new line but in 1 line. I got 3 line of text in the file. Here is my echo .

echo $(awk '{ print $1 }' $File | sort | uniq -c | sort -nr) > $Output

[IdOp]

@ bsdnewbie999: Sorry if my post seemed too cryptic; maybe it's a language problem.

My suggestion was to replace this

echo $(tcpdump -r $ANSWER -o -ttt -vv -e -n) > $OUTPUT

with this:

tcpdump -r $ANSWER -o -ttt -vv -e -n > $OUTPUT

I hope that works for ya.