Getting pcap file size more than 2mb

[Ashu]

even after using port not 8080 and -c300 i am still getting file size more than 10mb…please help me…i am stucked with this since 4 days…and when i was running ping command in command prompt it runs for 4 times and stopped automatically…why this is happening???

[imbipulkumar]

Hey @Ashu, similar issue has been resolved here Pcap files are gitting large some times

[Jitender]

Use port not 8080 and -c1000. It will help you to limit your pcap file size.

[nabhanpv]

Hi @Ashu,

You can check these hints out to get a better grasp of what to filter in/out and why?

1. Why do we filter on specific ports?

Capturing packages

@ankyy Like a fish net catch different types of fishes big,small etc, tcpdump is a tool to catch all network requests coming to a computer. Now, there are different type of network requests. For example, website content are usually retrieved by a HTTP request which translates to sending a network packet having data in accordance with the HTTP protocol. Also, common requests like HTTP, SSH use predefined ports(although can be changed). HTTP - 80, FTP - 21, SSH-22, DNS-53 Coming to you…

2. What can I do to reduce my pcap file size apart from filtering using ports?

Pcap files are gitting large some times

Hey you can go through the following post to understand what filters have to be added in order to make the pcap file smaller.