Evan Hunt wrote: > I remember submitting a change to Robert so that a SIGHUP to > fstrm_capture would cause it to flush its output immediately. I'm > not sure whether he ever accepted the patch though. It was added in the fstrm 0.3.0 release: https://github.com/farsightsec/fstrm/pull/12 -- Robert Edmonds