Hi,

Well apparently you have some clue what's going on, that is what 
protocols can be used. I think you can make an educated guess from that.
Otherwise a different tool may be better for you, like ntop maybe?
Wireshark is really meant to drill down into the packets and squeeze the 
latest details out of them. You are going the other way, so maybe this 
is not the tool for you.

Thanx,
Jaap

Albretch Mueller wrote:
> On Jan 21, 2008 4:38 PM, Jaap Keuter <[EMAIL PROTECTED]> wrote:
>> Hi,
>>
>> That one is easy. Just set the snaplength to the size you need.
>> That is the "Limit each packet to xxx bytes" entry on the Capture
>> options dialog.
> ~
>  but headers lengths differ for different protocols, if you set
> snaplength to 0 how are you going to know them
> ~
>  I would like to still get the metadata about the connection
> ~
>  lbrtchx

_______________________________________________
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users

Reply via email to