inotifywait should use the "close_write" event instead of "create"

[lorenzo9uerra]

With the "create" event inotifywait gets triggered as soon as the file is created, which means that if a file is still being transfered for example with scp, inotifywait gets triggered and the file is being submitted to caronte, but the file is incomplete and shows an EOF error. With "close_write" inotifywait gets triggered only when the transfer is completed, so the pcap is fed correctly to caronte

As the inotifywait docs say:

close_write
              A watched file or a file within a watched directory was closed, after being opened in writable mode.  This does not necessarily imply the file was written to.

[eciavatta]

Thanks :)