Re: tcpdump -s0
Hi! On Wed, Jun 18, 2008 at 10:32:04AM -0400, arthur wrote: -s0 always error with 'invalid snaplen 0' and the man page doen't mention how to capture full frame. However, the man of tcpdump support s0 (http://www.tcpdump.org/tcpdump_man.html) You don't invoke the manual page of OpenBSD's tcpdump via looking at a foreign web page. Either use man tcpdump on your OpenBSD box or use http://www.openbsd.org/cgi-bin/man.cgi I see nothing about a special handling of 0 as value for the option -s there. How could I capture full messages. Use an appropriate high value (e.g. as high as the MTU of the interface) for -s. Kind regards, Hannah.
Re: tcpdump -s0
On Wed, Jun 18 2008 at 32:10, arthur wrote: -s0 always error with 'invalid snaplen 0' and the man page doen't mention how to capture full frame. However, the man of tcpdump support s0 (http://www.tcpdump.org/tcpdump_man.html) How could I capture full messages. You can just use a value bigger than the MTU. # tcpdump -ns 1550 Claer
Re: tcpdump -s0
- Original Message - From: Hannah Schroeter [EMAIL PROTECTED] To: arthur [EMAIL PROTECTED] Cc: Openbsd Misc (E-mail) misc@openbsd.org Sent: Wednesday, June 18, 2008 10:40 AM Subject: Re: tcpdump -s0 Hi! On Wed, Jun 18, 2008 at 10:32:04AM -0400, arthur wrote: -s0 always error with 'invalid snaplen 0' and the man page doen't mention how to capture full frame. However, the man of tcpdump support s0 (http://www.tcpdump.org/tcpdump_man.html) You don't invoke the manual page of OpenBSD's tcpdump via looking at a foreign web page. Either use man tcpdump on your OpenBSD box or use http://www.openbsd.org/cgi-bin/man.cgi I see nothing about a special handling of 0 as value for the option -s there. Thanks for the quick reply. I did check the OpenBSD man and find out 'the man page doen't mention how to capture full frame' (as in my email, sorry for my English) How could I capture full messages. Use an appropriate high value (e.g. as high as the MTU of the interface) for -s. I will do that. BTW, do you know is there any limitiation of the number. Kind regards, Hannah.
Re: tcpdump -s0
Hi! On Wed, Jun 18, 2008 at 10:52:43AM -0400, arthur wrote: On Wed, Jun 18, 2008 at 10:32:04AM -0400, arthur wrote: -s0 always error with 'invalid snaplen 0' and the man page doen't mention how to capture full frame. However, the man of tcpdump support s0 (http://www.tcpdump.org/tcpdump_man.html) You don't invoke the manual page of OpenBSD's tcpdump via looking at a foreign web page. Either use man tcpdump on your OpenBSD box or use http://www.openbsd.org/cgi-bin/man.cgi I see nothing about a special handling of 0 as value for the option -s there. Thanks for the quick reply. I did check the OpenBSD man and find out 'the man page doen't mention how to capture full frame' (as in my email, sorry for my English) Okay... Just: OpenBSD's tcpdump is not the same as the other tcpdump. How could I capture full messages. Use an appropriate high value (e.g. as high as the MTU of the interface) for -s. I will do that. BTW, do you know is there any limitiation of the number. I don't know of any, but I don't have the time now to check more thoroughly. Kind regards, Hannah.
Re: tcpdump -s0
On Wed, Jun 18 2008 at 32:10, arthur wrote: -s0 always error with 'invalid snaplen 0' and the man page doen't mention how to capture full frame. However, the man of tcpdump support s0 (http://www.tcpdump.org/tcpdump_man.html) How could I capture full messages. You can just use a value bigger than the MTU. # tcpdump -ns 1550 Claer Thanks Claer and Hannah. As long as MTU value works, I won't worry about the limitation;) Anyway, the code could tell us if there is any limitation, right. Arthur
