Tcpdump

OS: 
UNIX
Function: 
tcpdump
Summary
  • Used to observe the network traffic on a given interface.
Detailed Description
  • tcpdump allows you to capture traffic on a network and display the packet. tcpdump can be used to identify network problems or to monitor network activities.
Command Syntax

  • tcpdump [ -AdDefIKlLnNOpqRStuUvxX ] [ -B buffer_size ] [ -c count ]

    [ -C file_size ] [ -G rotate_seconds ] [ -F file ]
    [ -i interface ] [ -m module ] [ -M secret ]
    [ -r file ] [ -s snaplen ] [ -T type ] [ -w file ]
    [ -W filecount ]
    [ -E spi@ipaddr algo:secret,... ]
    [ -y datalinktype ] [ -z postrotate-command ] [ -Z user ] [ expression ]
  • http://linux.die.net/man/8/tcpdump
Examples
  • Start tcpdump so that it monitors all packets that contain the IP address of PC2
    • PC1% tcpdump -n host 10.0.1.12