Date: Thu, 9 Oct 1997 15:57:21 -0500 (CDT) From: Mark Tinguely <tinguely@plains.NoDak.edu> To: joe@via.net, questions@FreeBSD.ORG Subject: Re: tcpdump Message-ID: <199710092057.PAA12896@plains.NoDak.edu>
next in thread | raw e-mail | index | archive | help
> Does tcpdump dump the entire packet? the default action is to copy the first 83 bytes from kernel space to the tcpdump application. The option -s can change that default. > > Does the dumped data include the tcp headers or is it the > "payload"? the dumped data is the ethernet frame (which may be IP, or not). --mark.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199710092057.PAA12896>