Ethereal-users: Re: [Ethereal-users] tethereal and tcpdump Have Different Results?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jerry Talkington <jtalkington@xxxxxxxxxxxxxxxxxxxxx>
Date: Wed, 15 Feb 2006 15:29:41 -0800
On Wed, Feb 15, 2006 at 06:11:16PM -0500, David Wolever wrote:
>
[snip]
> Why is this?  Is there any way I can use tcpdump to create more
> "intelligible" packet captures?  Am I simply doing something wrong?

tcpdump only captures 64 byte packets by default.  Use -s 0 to tell it
to capture the complete packet.

tcpdump -s 0 -w trace.cap

-- 
GPG public key:
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9D5B8762