Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How can i limit the packet size when i am capturing with Tshark using command line

Tags:

wireshark

currently my command is tshark.exe -i (int interface) -V -x -w C:\file.pcap but i cannot find what i am supposed to add in order to limit the packet size

like image 557
user1710944 Avatar asked Dec 13 '25 19:12

user1710944


1 Answers

You can use the option -s capture snaplen.

-s capture snaplen
Set the default snapshot length to use when capturing live data. No more than snaplen bytes of each network packet will be read into memory, or saved to disk. A value of 0 specifies a snapshot length of 65535, so that the full packet is captured; this is the default.
This option can occur multiple times. If used before the first occurrence of the -i option, it sets the default snapshot length. If used after an -i option, it sets the snapshot length for the interface specified by the last -i option occurring before this option. If the snapshot length is not set specifically, the default snapshot length is used if provided.

Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!