tcpdump -s 1500 will get you your data as well. Now for dissection tethereal(1) might be better suited. Capture using tcpdump(1), then read with tethereal(1) as a non uid 0 user. The latest ethereal-10.11 compiles fine. If you have any issues let me know.
"I am not your puppet. Since when? Now get your spongy ping ass out there and dance for the cameras" -Nora in (Death to Smoochy)
On Tue, 19 Jul 2005 [EMAIL PROTECTED] wrote:
Date: Tue, 19 Jul 2005 17:20:43 +0300 From: [EMAIL PROTECTED] To: misc@openbsd.org Subject: sniffer Hi I need to sniff a network segment and I need to sniff both headers and data. Because tcpdump captures only headers its unsuitable for the task. I saw that ports has ettercap and sniffit but I didn' get around to testing them to see if they will do the job I need. Can anyone recommend other tools that will do the work? Paolo