Wireshark mailing list archives

Re: [truncated] packets


From: Guy Harris <guy () alum mit edu>
Date: Mon, 15 Mar 2010 23:05:44 -0700


On Mar 15, 2010, at 10:21 PM, andrew Wilson wrote:

I was recently reviewing a .pcap dump and I noticed that packet payloads with especially long lines are truncated.

Yes.  There is a limit of 240 characters for each line in the packet detail pane.

I was looking for ideas how I can get this content out?  Is there a way to change the settings to not truncate or 
increase the size somehow?

You would have to change ITEM_LABEL_LENGTH in epan/proto.h in the Wireshark source code and recompile Wireshark.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: