On Wed, Feb 05, 2003 at 04:04:53PM -0500, Matthew Comb wrote: | Hi, new to this list. | | Have successfully translated some dump files into IPheader/TCPheader and | then data. Unfortunately the data seems to be missing approximately the | last 14 bytes of information in 1500 byte long packets. | | The packets do not appear to be fragmented. The flags and fragmentation | offset seem to be normal and apart from the fact the last little bit is | missing everything else is normal. | | I have triple checked against the dump files to make sure that it wasnt | a read error from my client. But the tcpdump output files are definately | short these bytes on these packets. | | Can anyone offer any assistance?
what snaplen did you use ? /hannes - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
