meta data for this page
  •  

This is an old revision of the document!


TCPDump

tcpdump -D
 
tcpdump -i <interface>
 
tcpdump -i <interface> [capture filter]
tcpdump -i <interface> port ## and udp
 
# -n: no conversion
tcpdump -i <interface> -n -w dump.pcap [cf]
 
tcpdump -i <interface> -n -w dump_%c.pcap -Z root -C 1000 [cf]