Does Wireshark provide the option of capturing just the first x number of bytes of a packet or frame? Thanks.
asked 29 Dec '10, 11:01
There are two ways to do this. One would be to recomiple the kernel of your operating system to capture 64 bytes (reprogram winpcap), OR in the capture options window (ctrl-K), you can use the Limit Each Packet to ... bytes" dialog.
I would go with option #2! :)
answered 29 Dec '10, 11:08
Thank you hansangb! Option 2 it is!
answered 29 Dec '10, 11:34