This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Does Wireshark provide the option of capturing just the first x number of bytes of a packet or frame? Thanks.

asked 29 Dec '10, 11:01

JamesClassV's gravatar image

JamesClassV
1222
accept rate: 0%


There are two ways to do this. One would be to recomiple the kernel of your operating system to capture 64 bytes (reprogram winpcap), OR in the capture options window (ctrl-K), you can use the Limit Each Packet to ... bytes" dialog.

I would go with option #2! :)

permanent link

answered 29 Dec '10, 11:08

hansangb's gravatar image

hansangb
7912619
accept rate: 12%

lol @option #1... Hansang, having fun? :-)))

(29 Dec '10, 14:50) Jasper ♦♦

With all the progammers around here, you never know! ;)

(30 Dec '10, 07:24) hansangb

Thank you hansangb! Option 2 it is!

permanent link

answered 29 Dec '10, 11:34

JamesClassV's gravatar image

JamesClassV
1222
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×549
×248
×2

question asked: 29 Dec '10, 11:01

question was seen: 6,850 times

last updated: 30 Dec '10, 07:24

p​o​w​e​r​e​d by O​S​Q​A