Re: Packet Size limited during capture message

[Guy Harris <guy () alum mit edu>]

On Mar 21, 2010, at 9:14 PM, Brian Oleksa wrote:

> But I was able to run the pcap file and stop the loading process before 
> it crashed and one thing that I noticed
> was in the info column it said "Packet Size limited during capture".

In the detail view for the packet that has "Packet Size limited during capture", the topmost line ("Frame {N}") should 
say "{N} bytes on wire, {M} bytes captured" (it might also give some numbers of bits).  Is {N} greater than {M}?  If 
so, that's the problem - the packets were captured with a snapshot length specified, so that at most the first {M} 
bytes of the packet were saved to the file.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe