CTED]
Sent: Wednesday, August 25, 2004 9:48
AM
Subject: Re: [tcpdump-workers] 'tcpdump -s0'
payload length limit?
David Front wrote: I notice that 'tcpdump -s0'
truncates packets with payloads longer than (~1400 or) ~1500
bytes. Is there a way to get full long payloads (or is this due to
a (Et
On Aug 25, 2004, at 11:05 AM, David Front wrote:
11:33:55.601653 IP lxfs5623.cern.ch.32962 lcgmon002d.cern.ch.12509:
UDP, length: 1637
UDP, length: 1637 means that the *UDP* packet length is 1637 bytes.
That doesn't mean that the *Ethernet* packet is 1637 bytes, as you note
later:
IP message
On Aug 25, 2004, at 11:09 AM, Guy Harris wrote:
Note, however, that the reassembly is *NOT* done at the low-layer
capture level, so a capture filter of port 12509 will only capture
the first fragment of a fragmented datagram, and Ethereal and
Tethereal will *NOT* be able to reassemble the
