Ethereal-dev: Re: [Ethereal-dev] Am I insane?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 8 Feb 2001 12:57:36 -0800 (PST)
> BOING! Wrong conclusion. tcpdump is fine, just add '-s 1500'.

Or "-s 0", in tcpdump 3.6.x, which means "give me all the data in the
packet, please" (which it does by setting the snapshot length to 65535).

Note that Tethereal (like Ethereal) defaults to a snapshot length of
65535, to avoid getting truncated packets by default.