Oops… that will limit the size of all captured packets – usually
the DHCP and DNS packets are not very big… alternately run two captures – one just
for DNS and DHCP no packet size limitation (port 53 or port 67 or port 68) and
the other set for all other traffic with a packet size limitation and no
DNS/DHCP. Then merge the two trace files… just an idea.
Laura Chappell
Founder, Wireshark University
Sr. Protocol/Security Analyst, Protocol Analysis Institute
******************************************************************************
This message is intended only for the use of the addressee and
may contain information that is privileged and confidential. If you are not the
intended recipient, you are hereby notified that any use and/or dissemination
of this communication is strictly prohibited. If you have received this
communication in error, please delete all copies of the message and its
attachements and notify the sender immediately.
******************************************************************************
From:
wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Jake Peavy
Sent: Thursday, June 28, 2007 4:35 PM
To: Wireshark Mailing List
Subject: [Wireshark-users] Limit _certain_ packets to 67 bytes?
Hi guys, this is kind of a long shot, but Wireshark has the
ability to limit all packets to x bytes in the Capture Options. Is there
a way to only limit packets matching a certain criteria to x bytes? In
this case I need the complete DHCP and DNS packets, but don't want all the
content from the UDP packets which is really blowing my .cap's up in size.
Even if I could do it in post-processing somehow I'd be fine with that...
TIA,
--
-jp
Chuck Norris, Vin Diesel and Arnold Schwarzenegger have all died and are in
Heaven. Each of them hope to occupy the seat next to God. God asks Vin Diesel
why he thinks he should have the seat and Vin replies, "I believe... I
should have the seat because of the virtuosity in my toughness and pride."
Arnie says, "I believe... that I should be the one sitting next to you
because of all my achievements." God then turns to Chuck Norris, who
replies with, "I believe... you are sitting in my seat."
