On Sat, Apr 23, 2022 at 10:28:37PM -0400, Wietse Venema wrote: > It would be invaluable to have a recording of a complete session > with that system. Something like: > > tcpdump -i name-of-interface is 2000 -w /file/name host 1.2.3.4
I think Wietse meant "-s 2000" rather than "is" 2000. The same can be accomplished with "-s 0" (no limit). -- Viktor.