Should the default snapshot length in tcpdump be 65535?

[Guy Harris <guy () alum mit edu>]

The "tcp" in "tcpdump" is a bit old - people use it for doing more  
than just looking at TCP headers these days - and it sounds as if the  
problem Torsten Krah had tring to decrypt ipsec traffic was due to the  
packets being cut short by a snapshot length.

Would it make sense to have tcpdump default to the maximum snapshot  
length, rather than 68 (without IPv6 support) or 96 (with IPv6 support)?
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.