Re: [tcpdump-workers] tcpdump -r option

Latha G wrote: And one more thing, we are using tcpdump -w dump.pcap means the whole raw packet will be stored or only 96 bytes(default) of the packet will be stored in dump.pcap?? It means that all the captured bytes will be stored - but, as no "-s" flag was given, the limit on the per-packe

Re: [tcpdump-workers] tcpdump -r option

Hi Thanks for your answer. And one more thing, we are using tcpdump -w dump.pcap means the whole raw packet will be stored or only 96 bytes(default) of the packet will be stored in dump.pcap?? If only 96 bytes will be stored then we cann't get the correct output for tcpdump -s 200 -r dump.pcap r

Re: [tcpdump-workers] tcpdump -r option

Latha G wrote: Hi all, Thanks for your support till now. I want to clarify few things about the tcpdump -r option I just used tcpdump -w dump.pcap The -r option is used just to read back what we stored using -w option or can we use the dump.pcap file as network and we can apply all options & f

[tcpdump-workers] tcpdump -r option

Hi all, Thanks for your support till now. I want to clarify few things about the tcpdump -r option I just used tcpdump -w dump.pcap The -r option is used just to read back what we stored using -w option or can we use the dump.pcap file as network and we can apply all options & filters i mean lik