Ethereal-dev: Re: [Ethereal-dev] FW: Ethereal and "Limiting Packet to X bytes"

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 09 Mar 2006 10:54:41 -0800
Kelly Sides wrote:

We are using Ethereal for hands on experience and we are wondering why
when you try to capture and you want to limit Packets to X bytes, it
won't go below 68 bytes.  Why is that

Probably because that's the tcpdump default.

and can it be changed to go lower?

Yes - 68 might be tcpdump's default when built without IPv6 support (96 is the default when it's built with IPv6 support), but you *can* set it shorter with the "-s" flag in tcpdump, so Ethereal and Tethereal (which default to 65535) should also let you set it lower.