I was doing a simple
1
| |
today in the course of a little packet sniffing. I opened the output in ethereal only to find several of the packets had “[short frame]” in the summary. A quick google found the answer, but maybe if I had just read the output I would have figured it out earlier:
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
96 bytes doesn’t get you too far with certain protocols… Using a
1
| |
gave me the packets I was looking for.
More on this later if everything works out as planned, but definitely not tonight - I’m going to see a private screening of Wedding Crashers. How glamorous. ;)