Wireshark-users: Re: [Wireshark-users] [truncated] packets
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 15 Mar 2010 23:05:44 -0700
On Mar 15, 2010, at 10:21 PM, andrew Wilson wrote:

> I was recently reviewing a .pcap dump and I noticed that packet payloads with especially long lines are truncated.

Yes.  There is a limit of 240 characters for each line in the packet detail pane.

> I was looking for ideas how I can get this content out?  Is there a way to change the settings to not truncate or increase the size somehow?

You would have to change ITEM_LABEL_LENGTH in epan/proto.h in the Wireshark source code and recompile Wireshark.