pflogd: default snaplen

[giovanni]

hi,

    -s snaplen
             Analyze at most the first snaplen bytes of data from each packet
             rather than the default of 116.  The default of 116 is adequate
             for IP, ICMP, TCP, and UDP headers but may truncate protocol
             information for other protocols.  Other file parsers may desire a
             higher snaplen.

it seems to me that the default is 160. am I wrong?

#define DEF_SNAPLEN 160         /* pfloghdr + ip hdr + proto hdr fit usually */

-- 
see ya,
giovanni