I have a Python script to capture network traffic with tcpdump
in a subprocess
:
p = subprocess.Popen(['tcpdump', '-I', '-i', 'en1','-w', 'cap.pcap'], stdout=subprocess.PIPE)
time.sleep(10)
p.kill()
When this script completes its work, I'm trying to open output .pcap
file in Wireshark and getting this error:
"The capture file appears to have been cut short in the middle of a packet."
What solution could be applied for "proper" closing of tcpdump
's subprocess
?