Re: tcpdump with snaplen set to 128

[Guy Harris <guy () alum mit edu>]

On Oct 15, 2012, at 6:41 PM, Perry Smith <pedzsan () gmail com> wrote:

> I'd be happy to supply a sample.  Can you suggest a way to get it to you?

The best way would probably be to file a bug at

        http://bugs.wireshark.org/

asking for an enhancement to try to find out the "on-the-wire" packet length in iptrace packets, and attach the 
capture.  File it against the product "Wireshark" and the component "Capture file support (libwiretap)".  Attachments 
*can* be marked as private, so that, for example, capture files can be made readable only by Wireshark developers in 
the right group (Gerald, who's that?), but a quick test didn't show how to mark it as such *at the time you attach it*.

Indicate in the bug what the "on-the-wire" packet length(s) for the packet(s) in question should be; one packet that 
was longer, on the wire, than the snapshot length should suffice.

We may mark it as "WONTFIX" if there's no "on the wire" packet length we could find; otherwise, if we find it, we'll 
fix it.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe