From owner-freebsd-stable Tue Dec 18 14:14:49 2001 Delivered-To: freebsd-stable@freebsd.org Received: from shumai.marcuscom.com (rdu57-28-046.nc.rr.com [66.57.28.46]) by hub.freebsd.org (Postfix) with ESMTP id 2014A37B417 for ; Tue, 18 Dec 2001 14:14:46 -0800 (PST) Received: from localhost (marcus@localhost) by shumai.marcuscom.com (8.11.6/8.11.6) with ESMTP id fBIMEq867055; Tue, 18 Dec 2001 17:14:52 -0500 (EST) (envelope-from marcus@marcuscom.com) X-Authentication-Warning: shumai.marcuscom.com: marcus owned process doing -bs Date: Tue, 18 Dec 2001 17:14:52 -0500 (EST) From: Joe Clarke To: Sam Drinkard Cc: freebsd-stable@FreeBSD.ORG Subject: Re: snaplen In-Reply-To: <3C1FB837.E7B42F38@vortex.wa4phy.net> Message-ID: <20011218171357.D65193-100000@shumai.marcuscom.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG By default, I thing tcpdump's snap length is only 68 bytes. Most packets are bigger than this. If you're capturing on ethernet, pass the argument of -s 1518 to capture the entire frame. Joe On Tue, 18 Dec 2001, Sam Drinkard wrote: > Was doing some snooping this afternoon on my internal net, and saw a > couple of warnings about increasing snaplen from the NBT packets.. did a > bit of reading and found that by passing the argument of "s0" after the > interface name will elminiate the warning that the snaplen is too > short. Since I'm not much into fixing code, I thought I'd mention it > and let somebody that knows how to do it take a stab at it.. > > Sam > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message