tcpdump

[Paul Ross]

Or better yet, from my copy of the man page: (v3.6)

"Setting snaplen to 0 means use the required length to catch whole packets."

-----Original Message-----
From: netfilter-admin@lists.samba.org
[mailto:netfilter-admin@lists.samba.org]On Behalf Of John McDermott
Sent: Saturday, July 28, 2001 12:25 PM
To: Ramin Alidousti
Cc: netfilter@lists.samba.org
Subject: Re: tcpdump


>From the tcpdump manual:
     -s     Snarf snaplen bytes of data from each packet rather

...

need "-s 1500" to do this on Ethernet. Generally, asking for about 500
is enough, though.  Also, if you want more information about the packet,