Ethereal-dev: Re: [Ethereal-dev] Decoding packets while writing to file with te thereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 20 Aug 2002 22:56:31 -0700
On Wed, Aug 21, 2002 at 04:38:37PM +0930, Richard Sharpe wrote:
> I tend to avoid [t]ethereal when capturing on GigE and use tcpdump with -s 
> 200 or some such (unless I need all 1500 bytes, which is not often), so I 
> can avoid any dropped packets.

Is there a difference between "tethereal -s 200" and "tcpdump -s 200" if
you're using "-w" in both cases?  (Yes, the code path is longer, as we
do more stuff.)