[Patrick Rutkowski <thinktank89@xxxxxxxxx>]

Nope, I've had no luck as of yet, check out my terminal output.

root@gentoo tcpdump # tcpdump --version
tcpdump version 3.8.3
libpcap version 0.8.3
Usage: tcpdump [-aAdDeflLnNOpqRStuUvxX] [-c count] [ -C file_size ]
                [ -E algo:secret ] [ -F file ] [ -i interface ] [ -r file ]
                [ -s snaplen ] [ -T type ] [ -w file ] [ -y datalinktype ]
                [ expression ]
root@gentoo tcpdump # tcpdump -w -s 65535 feb17
tcpdump: syntax error
root@gentoo tcpdump #



On Thu, 17 Feb 2005 19:11:56 -0500, David Howland
<metalliqaz@xxxxxxxxxxx> wrote:
> Guy Harris wrote:
> > What's wrong with your method is the lack of a "-s 65535" - or, on newer
> > versions of tcpdump, "-s 0", which means the same thing in newer
> > versions - in the tcpdump command.
> 
> Ah, that sounds like the solution.  I will give it a try soon.  I was
> unaware of that "snapshot length".  Thank you very much for your insights.
> 
> -d
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>