Ethereal-users: Re: [Ethereal-users] AIM decode?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Patrick Rutkowski <thinktank89@xxxxxxxxx>
Date: Thu, 17 Feb 2005 23:45:19 +0000
Not to sound like a pirate, but, Aye, I have the same issue. tcpdump
-w <filename> seams to only log 96 bytes of the packet, while for the
full message block to be there with AIM protocol packets you need to
gather the full packet, everything that goes over the wire. Sadly...
I've yet to find a command to boost up the max packet size capture on
tcpdump and I'd very much appreciate help with this issue also.

P.S. I'm running Linux (Gentoo) You?


On Thu, 17 Feb 2005 18:27:20 -0500, David Howland
<metalliqaz@xxxxxxxxxxx> wrote:
> I'm trying to track all AIM messages that go through my computer.  I
> collect the data with "tcpdump -w dumpfile" and send a few test
> messages.  I can open the dumpfile in ethereal fine, and can locate the
> AIM packets, however I can't retrieve any of the messages.  All the
> important packets seem to just say [short frame: AIM] and there is no
> data.  Can anyone explain what might be wrong with my method?
> 
> thanks!
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>