Ethereal-dev: Re: [Ethereal-dev] Re: RADIUS short frames

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 25 Jan 2005 12:58:46 -0800
Dipole Moment wrote:

Duh.  A little more research revealed that it's not a deficiency in
ethereal, but the capture files I was looking at were captured with
the default snaplen which wasn't enough...
Presumably meaning "default tcpdump snaplen"; it's unfortunate, at times, that the default is 68 bytes for non-IPv6-enabled tcpdumps and 96 bytes for IPv6-enabled tcpdumps. That's why, whenever I tell people to use tcpdump to capture traffic, I tell them to use the "-s" flag (and the "-w" flag, so I don't just get the text dissection of the packets).