Capture User Data Bytes

Philipp E. Letschert phil at uni-koblenz.de
Sun Dec 3 23:12:51 EST 2006


The capture starts in application layer (= user data). Another thing to remind
is, that the maximum capture size seems to be 32 byte, that is 16 byte each for
source and destination.


Philipp

On Mon, Dec 04, 2006 at 09:58:04AM +0800, CS Lee wrote:
> Hello people,
> 
> Thanks for ragrep man page, ragrep works now by capturing user data bytes,
> with this I'm confused since it says user data bytes, if I specify -U 60,
> the capture will start on application layer or network layer? I know the mac
> data can be captured as well but my concern now on the payloads and that's
> what I think ragrep is used for.
> 
> Sorry if I'm asking too many questions, but I need to know exactly to
> specify the better value for user data bytes to be captured.
> 
> Thanks again.
> 
> -- 
> Best Regards,
> 
> CS Lee<geekooL[at]gmail.com>

-- 
  /-\
 C oo   "Das beste Werkzeug wird zum Tand in eines tumben Toren Hand."
 _( ^)                                               Daniel Düsentrieb
/   -\



More information about the argus mailing list