Ethereal-users: Re: [Ethereal-users] capturing whole packet

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxx>
Date: Fri, 9 Aug 2002 16:51:34 -0700
On Fri, Aug 09, 2002 at 07:23:28PM -0400, Martin Shurbanov wrote:
> I am trying to figure out how I need to set tethereal to capture the data 
> portion of the packet instead of just the header.

By default, tethereal captures all of the packet.  This is different
from tcpdump, which, by default, only captures the first 68-96 bytes of
the packet.