Hi Team, Sometimes I am not able to access the Internet (means not resolve the IP address of the website and whenever I entered the public IP address in the web browser I am able to access the website) so I have captured some traffic using wireshark and noted that getting some message for DNS ([Packet size limited during capture: DNS truncated] so Please let me know why I am getting this message. asked 07 Sep '15, 04:41  Smit19 edited 08 Sep '15, 09:59  grahamb ♦ |
2 Answers:
Your capturing setup is likely to be limiting the size of packets received, this is usually an option. What version of Wireshark and what OS are you using? answered 07 Sep '15, 04:52 grahamb ♦ |
You're getting that message because there WAS a packet size limit of 96 bytes when the packets were captured. Click on Statistics > Summary and in the middle section, titled "Capture," you will see "96 bytes" under "Packet size limit." Go to Edit > Preferences > Capture and then click "Edit" to the right of "Interfaces." Select the appropriate interface, and make sure the box to the right of "Limit each packet to" is unchecked. I'd also go to the Capture Options page, double-click the interface you're capturing on and again make sure "Limit each packet to" is unchecked. answered 07 Sep '15, 22:39  Jim Aragon Thank you very much for your answer and let me check the same from my side. (08 Sep '15, 00:06) Smit19 |
Thank you for your Answer.
The Wireshark version is (v1.12.7-0-g7fc8978 from master-1.12).
OS:: Windows.
and I want to know that is there any problem in network or this is normal message.
Your description of it seems normal to me, you have set a packet size limit during the capture so that's what Wireshark reports.
Can you share a capture in a publicly accessible spot, e.g. CloudShark, Google Drive, Dropbox?
Please refer below link for the pcap.
https://drive.google.com/file/d/0B6P32GvfmmqwYkp5dUFsZG9IOVk/view?usp=sharing
I would like to inform you I have not set the packet limit size in wireshark so if possible please let me know why this message I am getting in wireshark.