Wireshark · Wireshark-users: Re: [Wireshark-users] Question

[Sake Blok <sake@xxxxxxxxxx>]

On Thu, Nov 13, 2008 at 01:13:58PM -0500, Terry Martin wrote:
> 
> I just reviewed the packet and I am going to need the IGMP information
> which is the next 64 bytes.  
> 
> Is this going to be difficult? Should I collect the entire packet?

Nope, just change the value of the -s <X> option to suit your need. It just
cuts off the packet after X bytes. You might want to tune the parameter
so that is fits your need.

> If so is Dumpcap still the best?

Yes.

Cheers,
   Sake