Snort mailing list archives

Re: capturing arp (Absent jusqu'au 29/07/2002)

From: Edin Dizdarevic <edin.dizdarevic () interActive-Systems de>
Date: Tue, 15 Apr 2003 11:52:51 +0200

Hi,

Pascal Painparay wrote:

tcpdump -s 65335 -w arp.cap arp


Why would you want to capture more than 60 bytes?
(Stevens, The Protocols, page 23)

Regards,

Edin

--
Edin Dizdarevic



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread:

Re: capturing arp (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 14)
- Re: capturing arp (Absent jusqu'au 29/07/2002) Edin Dizdarevic (Apr 15)
  - Re: capturing arp (Absent jusqu'au 29/07/2002) Chris Green (Apr 16)
    - Re: capturing arp (Absent jusqu'au 29/07/2002) Edin Dizdarevic (Apr 16)
- <Possible follow-ups>
- Re: capturing arp (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 16)
- Re: capturing arp (Absent jusqu'au 29/07/2002) Pascal Painparay (Apr 16)