oops :-) On Wed, Oct 12, 2011 at 11:56 AM, giovanni <[email protected]> wrote: > hi, > > -s snaplen > Analyze at most the first snaplen bytes of data from each packet > rather than the default of 116. The default of 116 is adequate > for IP, ICMP, TCP, and UDP headers but may truncate protocol > information for other protocols. Other file parsers may desire a > higher snaplen. > > it seems to me that the default is 160. am I wrong? > > #define DEF_SNAPLEN 160 /* pfloghdr + ip hdr + proto hdr fit usually */ > > -- > see ya, > giovanni >
-- see ya, giovanni
