Ethereal-users: Re: [Ethereal-users] Filter Question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 20 Oct 2003 11:54:03 -0700

On Oct 20, 2003, at 11:08 AM, Dinkar Bhat wrote:

So it implies that one can't write a filter for capturing whole UDP packets of size > MTU

One cannot, in fact, write a capture filter to capture all of a UDP packet of a size > the MTU if the filter is checking the UDP port number and only passing packets that are going to or from particular ports.