Ethereal-users: RE: [Ethereal-users] Capture Filter

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Nicoson Dave <dave.nicoson@xxxxxxxxxxx>
Date: Tue, 9 Mar 2004 15:34:42 -0500
> -----Original Message-----
> From: McCabe, Mike [mailto:MMcCabe@xxxxxxxx]
> Sent: Tuesday, March 09, 2004 11:37 AM
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] Capture Filter
> 
> 
> I have Win32 eithereal installed on a W2K laptop.  How would 
> I setup a capture filter to only capture the first 128 bytes 
> of each packet so I don't capture the payload?  I going to 
> use it to monitor my internet and only want to see time, 
> source and destination.
> 
> Mike McCabe
> WJCS
> Information Services


Look in the capture dialog.  There's a "Limit each packet to" checkbox.  
Check that (or ALT-L), and put in your 128 in the text box.