Download Find`n`Secure Manual

Find’n’Secure® Version 2.0 Instruction Manual
Capturing with tcpdump for viewing with Wireshark There are occasions when you want to capture packets using tcpdump rather
than wireshark, especially when you want to do a remote capture and do not
want the network load associated with running Wireshark remotely (not to
mention all the X traffic polluting your capture).
However, the default tcpdump parameters result in a capture file where each
packet is truncated, because tcpdump, by default, only captures the first 68
bytes of each packet.
To ensure that you capture complete packets, use the following command:
tcpdump -i <interface> -s 1500 -w <some-file>
65