Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] minumum snapshot length IP packets

From: Andrej van der Zee <andrejvanderzee@xxxxxxxxx>
Date: Thu, 6 Aug 2009 09:16:49 +0900
Hi,

I have huge cap files that I want to reduce in size. In the end I only need the timestamp, protocol, packet length, src IP and dst IP. What is the minimum snapshot length I should use? Also, how can I get the snapshot length form an existing cap-file?

Thank you,
Andrej