Guy Harris wrote:
The most recent update to the ARP printing code (which isn't yet in a
release) prints "[|ARP]" for all the truncation cases.
i took the courtesy of cleaning up the printer recently ...
hope i did not break too much ;-)
/hannes
-
This is the tcpdump-workers list.
Visit https
Latha G wrote:
what is the reason for this behaviour?
The reason is that somebody decided to make one of the checking for
snapshot truncation report "truncated-arp" rather than the usual
"[|arp]". I don't know why they decided to do that; "truncated-ip", for
example, is printed if the leng
Hi all,
I am using tcpdump -s option for capturing 20 bytes of the packet..
I thought the output should come like [|arp] / [|ip] / [|igmp]
{corresponding to protocol}
means at that protocol, the packet was truncated..
but for my surprise for arp packets it was coming like truncated-arp
and pac
