Ethereal-users: Re: [Ethereal-users] AIM decode?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 17 Feb 2005 18:24:04 -0800
Patrick Rutkowski wrote:
Let me just make sure I understood, in short, "tcpdump -w -s 65535
<filename>" is our answer?

No,

	tcpdump -s 65535 -w <filename>

or

	tcpdump -w <filename> -s 65535

is your answer. The "-w" and "-s" flags each take an argument - the file name, in the case of "-w", and the snapshot length, in the case of "-s" - and the argument immediately follows the flag, so it's "-w <filename>" and "-s 65535".