Re: nfs attrs

[Guy Harris <guy () alum mit edu>]

On Feb 18, 2010, at 5:34 PM, Mag Gam wrote:

> I am currently doing a tcpdump (tcpdump -i eth1 -w /tmp/out).

Try

        tcpdump -i eth1 -s 65535 -w /tmp/out

instead.  Otherwise, you will be capturing only the first 68 or 96 bytes of the packet, so Wireshark won't be able to 
see very much of the NFS request or response.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe