Aiee :)
Hello!
On Thu, Jan 04, 2001 at 04:12:45PM +0100, Defiant wrote:
> Sorry for this stupid question...
> The Tcpdump prints the packet header--- and packet data? Is it possible to print
>also the data?
>
As the manpage says:
-s Snarf snaplen bytes of data from each packet rather
than the default of 68 (with SunOS's NIT, the mini-
mum is actually 96). 68 bytes is adequate for IP,
ICMP, TCP and UDP but may truncate protocol infor-
mation from name server and NFS packets (see
below). Packets truncated because of a limited
snapshot are indicated in the output with
``[|proto]'', where proto is the name of the proto-
col level at which the truncation has occurred.
Note that taking larger snapshots both increases
the amount of time it takes to process packets and,
effectively, decreases the amount of packet buffer-
ing. This may cause packets to be lost. You
should limit snaplen to the smallest number that
will capture the protocol information you're inter-
ested in.
and
-x Print each packet (minus its link level header) in
hex. The smaller of the entire packet or snaplen
bytes will be printed.
> thanks
> Defiant
bye bye
-- gg sullivan
--
Lorenzo Cavallaro `Gigi Sullivan' <[EMAIL PROTECTED]>
LibRNet Project Home Page: http://www.sikurezza.org/sullivan
LibRNet Mailing List: [EMAIL PROTECTED]
Until I loved, life had no beauty;
I did not know I lived until I had loved. (Theodor Korner)
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
