[Alexandros Papadopoulos <apapadop@xxxxxxxxxxxxxx>]

Dear all

I've captured some traffic data with tcpdump's default options (thus, 
snaplen==96).

Now I'm examining the packet stream in ethereal, which understands that 
packets have been trimmed - for each such frame it displays something 
like:
Frame 137 (126 bytes on wire, 96 bytes captured)

It looks like the IO graphs created with these packets refrect the real 
size of the packet (126 bytes) and not just the captured 96 bytes, 
which is The Right Thing To Do (TM).

I'd like a confirmation from someone more knowledgeable on ethereal that 
this is indeed the case.

Thank you.

-A