Wireshark-users: Re: [Wireshark-users] Question
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Sake Blok <sake@xxxxxxxxxx>
Date: Thu, 13 Nov 2008 19:28:47 +0100
On Thu, Nov 13, 2008 at 01:13:58PM -0500, Terry Martin wrote:
> 
> I just reviewed the packet and I am going to need the IGMP information
> which is the next 64 bytes.  
> 
> Is this going to be difficult? Should I collect the entire packet?

Nope, just change the value of the -s <X> option to suit your need. It just
cuts off the packet after X bytes. You might want to tune the parameter
so that is fits your need.

> If so is Dumpcap still the best?

Yes.

Cheers,
   Sake