Protocol headers-only capture?

[Dustin Spicuzza <dustin () virtualroadside com>]

Hey,

Is there currently a way to save protocol headers (and by this, I mean
ARP/IP/TCP/UDP/ICMP headers) to a file *without* the remaining payload?


If not, I could be motivated to write a patch to do this (it doesn't
seem like it would be that hard?) if someone just points me to the right
area of code where it should go. :)

Dustin


-- 
Innovation is just a problem away
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.