On Sun, 2006-Aug-27 22:55:55 +0300, Kostik Belousov wrote: >On server, >tcpdump -p -s 1500 -w file -i <iface> host <client host ip>
Recent tcpdumps appear to want the ethernet frame size rather than the MTU: Specifying 1500 appears to truncate full-size frames. Try '-s 1516' instead. -- Peter Jeremy
pgpozGke7ZjM8.pgp
Description: PGP signature