This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Capture the first 64bytes of a packet?

0

Does Wireshark provide the option of capturing just the first x number of bytes of a packet or frame? Thanks.

asked 29 Dec '10, 11:01

JamesClassV's gravatar image

JamesClassV
1222
accept rate: 0%


2 Answers:

1

There are two ways to do this. One would be to recomiple the kernel of your operating system to capture 64 bytes (reprogram winpcap), OR in the capture options window (ctrl-K), you can use the Limit Each Packet to ... bytes" dialog.

I would go with option #2! :)

answered 29 Dec '10, 11:08

hansangb's gravatar image

hansangb
7912619
accept rate: 12%

lol @option #1... Hansang, having fun? :-)))

(29 Dec '10, 14:50) Jasper ♦♦

With all the progammers around here, you never know! ;)

(30 Dec '10, 07:24) hansangb

0

Thank you hansangb! Option 2 it is!

answered 29 Dec '10, 11:34

JamesClassV's gravatar image

JamesClassV
1222
accept rate: 0%