Hi, is it possible to configure netsniff-ng to capture just the first few bytes of a session? Maybe like the first 10K bytes. Usually I don't need the entire payload (especially on encrypted traffic) but having the first few 10K bytes will give me the IPs/ports/cert info. I know that it is possible to only capture the header info with a BPF. Thanks in advance!
-- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to netsniff-ng+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
