Wireshark · Wireshark-users: Re: [Wireshark-users] tcpdump command to capture https traffic

[Guy Harris <guy@xxxxxxxxxxxx>]

Kaushal Shriyan wrote:
> Thanks and what does s 0 signifies, I know s means snapshot length so 
> what does s 0 signifies

It means "the maximum snapshot length", which is 65535 bytes.  (Versions 
of tcpdump prior to 3.6 require that you do "-s 65535", but all later 
versions support "-s 0".)