On Tue, 1 May 2001, Guy Harris wrote:
> Note that, by default, you should *not* print the entire packet;
> traditionally, tcpdump has printed, by default, only one line per
> packet, summarizing the packet.
Yes, but it is not always possible to summarize the packet in one line.
For example, look at SCTP... we had a hard time putting anything
meaningful into one line. The nature of the protocol is to bundle various
"chunks"... each of which has totally new information. Hence, printing
only the first one (or something similar), would give an incorrect view of
the contents.
-----------------------------------------------------------------------
Armando L. Caro Jr. [EMAIL PROTECTED]
University of Delaware http://www.cis.udel.edu/~acaro
-----------------------------------------------------------------------
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
