There used to be a check box to capture just the headers of a packet. I cannot find this option in the latest version of wireshark, is it no longer and option? asked 19 Aug '16, 08:35  jbutterfield |
One Answer:
From the menu Capture -> Options ..., in the interface list there is a Snaplen column, usually set as "Default". answered 19 Aug '16, 08:53  grahamb ♦ |
There never was an option labeled as "capture just the headers of the packet" or something such as that. There was always a "snapshot length" option, which is "capture no more than the first N bytes of the packet, for a specified value of N"; see grahamb's answer.