https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2731
Summary: tshark/wireshark don't allow snaplen < 68
Product: Wireshark
Version: unspecified
Platform: PC
OS/Version: All
Status: NEW
Severity: Normal
Priority: Low
Component: TShark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: mkucenski@xxxxxxx
Build Information:
TShark 1.0.2 (SVN Rev 25698)
Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GLib 2.14.6, with WinPcap (version unknown), with libz 1.2.3,
without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8, with ADNS, with
Lua 5.1, with GnuTLS 2.3.8, with Gcrypt 1.4.1, with MIT Kerberos.
Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5.
Built using Microsoft Visual C++ 6.0 build 8804
--
Attempting to use tshark to only capture IP Packet headers (e.g. snaplen=34, 14
ethernet and 20 IP). tshark seems to ignore values less than 68. This seems
like an arbitrary restriction that in my case is a necessity. Tcpdump and
daemonlogger both allow smaller snaplen values. Is there any reason why tshark
cannot do the same?
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
