Tcpdump: Difference between revisions
Jump to navigation
Jump to search
(Created page with "== tcpdump == tcpdump -i <network_interface> -s 0 -w <file> Capture packets to host <ref>https://stackoverflow.com/questions/19960784/tcpdump-capture-packets-to-target-host</ref> tcpdump -i any -s 0 -w <file> host 10.1.1.1 tcpdump -i <network_interface> -s 0 -w <file> host 10.1.1.1 Capture packets and specify both IP and port <ref>https://serverfault.com/questions/1025292/how-to-specify-both-ip-address-and-port-in-tcpdump</ref> tcpdump -i enp1s9 dst 192.168.6.1 a...") |
No edit summary |
||
| Line 10: | Line 10: | ||
Capture packets and specify both IP and port <ref>https://serverfault.com/questions/1025292/how-to-specify-both-ip-address-and-port-in-tcpdump</ref> | Capture packets and specify both IP and port <ref>https://serverfault.com/questions/1025292/how-to-specify-both-ip-address-and-port-in-tcpdump</ref> | ||
tcpdump -i enp1s9 dst 192.168.6.1 and src 192.168.6.2 and src port 80 | tcpdump -i enp1s9 dst 192.168.6.1 and src 192.168.6.2 and src port 80 | ||
== nfs == | |||
tcpdump -i eth0 -nn port 2049 | |||
== ipv6 == | == ipv6 == | ||
Revision as of 21:42, 3 November 2026
tcpdump
tcpdump -i <network_interface> -s 0 -w <file>
Capture packets to host [1]
tcpdump -i any -s 0 -w <file> host 10.1.1.1
tcpdump -i <network_interface> -s 0 -w <file> host 10.1.1.1
Capture packets and specify both IP and port [2]
tcpdump -i enp1s9 dst 192.168.6.1 and src 192.168.6.2 and src port 80
nfs
tcpdump -i eth0 -nn port 2049
ipv6
tcpdump -t -n -i eth0 -s 512 -vv ip6 or proto ipv6