tag:blogger.com,1999:blog-4088979.post113502808692916082..comments2023-10-16T06:06:25.012-04:00Comments on TaoSecurity Blog: Disk Ring Buffer in Tcpdump 3.9.4Richard Bejtlichhttp://www.blogger.com/profile/13512184196416665417noreply@blogger.comBlogger3125tag:blogger.com,1999:blog-4088979.post-1135096748420200392005-12-20T11:39:00.000-05:002005-12-20T11:39:00.000-05:00I have always used "-s 1500" on ethernet segments....I have always used "-s 1500" on ethernet segments. What would be the difference here with "-s 0"? Any ideas?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-4088979.post-1135036944191735382005-12-19T19:02:00.000-05:002005-12-19T19:02:00.000-05:00Tom, that's good to hear. I guess the Tcpdump dev...Tom, that's good to hear. I guess the Tcpdump developers had to put something in the capture size output?Richard Bejtlichhttps://www.blogger.com/profile/13512184196416665417noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-1135029084428548932005-12-19T16:51:00.000-05:002005-12-19T16:51:00.000-05:00Hamfisted? That's a new one!Hamfisted? That's a new one!Anonymousnoreply@blogger.com