John Thacker authored Apr 24, 2024 and AndersBroman committed Apr 25, 2024

The tshark source says
"The whole reason for the "-l" flag in either tcpdump or TShark
is to allow the output of a live capture to be piped to a program
or script and to have that script see the information for the
packet as soon as it's printed, rather than having to wait until
a standard I/O buffer fills up."

So, if that option is given, set the update-interval for dumpcap to
zero so that the output of live captures are sent to tshark as
soon as available, instead of after a delay.

(If zero turns out to be too small, we can make it something like 1
or 2 ms.)

Fix #2874