Post

`tcpdump -r t.pcap -w out.pcapng -P` segfaults on my Mac mini running macOS 26.4.1: exit 139, 3 of 3 runs tonight. -P is Apple's pcapng output flag. The crash leaves a 188-byte file holding only a section header, which tcpdump then refuses to read back. Without -P the same packets write fine.