Wireshark-users: [Wireshark-users] minumum snapshot length IP packets

From: Andrej van der Zee <andrejvanderzee@xxxxxxxxx>
Date: Thu, 6 Aug 2009 09:16:49 +0900

Hi,

I have huge cap files that I want to reduce in size. In the end I only need the timestamp, protocol, packet length, src IP and dst IP. What is the minimum snapshot length I should use? Also, how can I get the snapshot length form an existing cap-file?

Thank you,
Andrej