Date: Tue, 18 Dec 2001 17:14:52 -0500 (EST) From: Joe Clarke <marcus@marcuscom.com> To: Sam Drinkard <sam@wa4phy.net> Cc: freebsd-stable@FreeBSD.ORG Subject: Re: snaplen Message-ID: <20011218171357.D65193-100000@shumai.marcuscom.com> In-Reply-To: <3C1FB837.E7B42F38@vortex.wa4phy.net>
next in thread | previous in thread | raw e-mail | index | archive | help
By default, I thing tcpdump's snap length is only 68 bytes. Most packets are bigger than this. If you're capturing on ethernet, pass the argument of -s 1518 to capture the entire frame. Joe On Tue, 18 Dec 2001, Sam Drinkard wrote: > Was doing some snooping this afternoon on my internal net, and saw a > couple of warnings about increasing snaplen from the NBT packets.. did a > bit of reading and found that by passing the argument of "s0" after the > interface name will elminiate the warning that the snaplen is too > short. Since I'm not much into fixing code, I thought I'd mention it > and let somebody that knows how to do it take a stab at it.. > > Sam > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011218171357.D65193-100000>