Ethereal-dev: Re: [ethereal-dev] Bug in Data-count and Hex-Dump from ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 23 Mar 2000 18:33:50 -0800 (PST)
> Make -s big enough to capture the entire frame.

...or do the capture with Tethereal, which, like Ethereal, defaults to
"a lot" for the snapshot length, rather than defaulting to "not very
much" as tcpdump does.

(tcpdump's default may be reasonable for what, given its name, I suspect
tcpdump may originally have been created for, namely capturing TCP
traffic so that Van, or somebody, could look at the behavior of TCP
implementations, but it's far from enough for doing what I usually want
to do here at NetApp, namely look at NFS or CIFS or HTTP or...  traffic,
in which case I tend to want to see *all* the payload.)