How to use tcpdump to capture packets for a long time in Linux

Linux with tcpdump long-term packet capture operation method command: tcpdump-ieth1-s0-wk.cap & amp; finally added & amp; is to make this command in the background for long-term execution, otherwise, the tcpdump command stops automatically after sshclient is disabled. Www.2cto.com and then log on again...
Command: tcpdump-I eth1-s 0-w k. cap & added at the end to make the command run in the background for a long time. Otherwise, the tcpdump command stops automatically after the ssh client is disabled. After www.2cto.com, log on to linux again and perform the following operations-bash-3.00 # ps-ef | grep tcpdumppcap 3660 1 0? 00:00:00 tcpdump-I eth1-s 0-w k. caproot 3721 3680 0 00:00:00 pts/1 grep tcpdump-bash-3.00 # kill 3660-bash-3.00 # ls-l-rw-r -- 1 root 33714 Mar 29 k. the cap downloads the message to the local device for analysis. Note:-s 0 indicates that the size of captured packets is not limited.
When using this command, you must pay attention to the remaining space (df-h) on the hard disk to avoid the abnormal use of the system due to excessive files.