I need to dump network flow periodically on a Linux platform, ideally using the command line interface (i.e., non-GUI tools), and I want every capture file (pcap files) to contain complete flows. How can I do this? (Is this possible via tcpdump?)
EDIT: for example, when receiving a file via ftp or http ,if the file is divided into , say, 10 packets, I want all packets and the headers to be in the same dump file.It would also be helpful if I could dump each flow in pcap format in a single file.