Re: TCP timestamp option

Chris Wedgwood (
Fri, 22 May 1998 13:11:17 +1200

> OK, but now there are nop,nop,timestamp or even
> nop,nop.timestamp,nop,nop,[|tcp] options by default.
> (BTW, what's [|tcp] ?)

from man tcpdump:


If the snapshot was small enough that tcpdump didn't cap-
ture the full TCP header, it interprets as much of the
header as it can and then reports `[|tcp]'' to indicate
the remainder could not be interpreted. [snip]

Use '-s 1518' to capture the whole packet, or '-s 128' or whatever to
capture as much as needed.


To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to