I ran following Commands :-
1) cat demo.cap | tshark -Tek -r - >> > outputs 8742 packets.
But when i try to tail the file....
2) tail -f -c +0 demo.cap | tshark -Tek -r - >> outputs 8672 packets.
3) tail -f -c +0 demo.cap | tshark -Tek -l -r - >> outputs 8672 packets.
On wireshark UI i get 8742 packets.
it's apparent that, all packets are not seen, I realized Tshark might be buffering its output, but -l is not helping either. can anyone explain where else to look?