Damon Cortesi's blog

Musings of an entrepreneur.

Ethereal Short Frame

| Comments

I was doing a simple

tcpdump -w file

today in the course of a little packet sniffing. I opened the output in ethereal only to find several of the packets had “[short frame]” in the summary. A quick google found the answer, but maybe if I had just read the output I would have figured it out earlier:

tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes

96 bytes doesn’t get you too far with certain protocols… Using a


gave me the packets I was looking for.

More on this later if everything works out as planned, but definitely not tonight - I’m going to see a private screening of Wedding Crashers. How glamorous. ;)