I am running dumpcap via the command
and noticed that despite downloading a 400MB~ file, on a repeater network (meaning the actual noise generated would be 800MB~) that my .pcapng was a mere 200MB!
Is this normal, compression or something else? Or am I missing an excessive amount of packets? Thanks!
note: its possible -B may need to be increased?
asked 17 Oct '17, 16:47
edited 17 Oct '17, 16:49
The syntax of your command is incorrect. Did you mean to write the following instead?
answered 17 Oct '17, 19:31