Tcpdump - Revision history

Hdridder at 09:23, 21 June 2024

2024-06-21T09:23:07Z

← Older revision		Revision as of 09:23, 21 June 2024
Line 2:		Line 2:

	;tcpdump		;tcpdump
	:Trace network traffic, all packets send are reported to standard output (terminal).		:Trace network traffic, all packets send are reported to standard output (terminal). [https://cdn.comparitech.com/wp-content/uploads/2019/06/tcpdump-cheat-sheet-2.pdf Cheatsheet]

	;:-w <filename> -C 10		;:-w <filename> -C 10
Line 8:		Line 8:
	;:-r <filename> -tttt -X		;:-r <filename> -tttt -X
	:::Read packets from <filename>, give absolute time and all data		:::Read packets from <filename>, give absolute time and all data
			;: -i <interface>
			:::Trace <interface> only
	;:-n port 53 and ip6 and host <address>		;:-n port 53 and ip6 and host <address>
	:::Do not lookup host or port-names, select only packets from port 53, IPv6 protocol and specified host(address)		:::Do not lookup host or port-names, select only packets from port 53, IPv6 protocol and specified host(address)

Hdridder at 13:23, 9 October 2020

2020-10-09T13:23:01Z

← Older revision		Revision as of 13:23, 9 October 2020
Line 1:		Line 1:
			[[Category:Networking]]

	;tcpdump		;tcpdump
	:Trace network traffic, all packets send are reported to standard output (terminal).		:Trace network traffic, all packets send are reported to standard output (terminal).
Line 7:		Line 9:
	:::Read packets from <filename>, give absolute time and all data		:::Read packets from <filename>, give absolute time and all data
	;:-n port 53 and ip6 and host <address>		;:-n port 53 and ip6 and host <address>
	:::1 Do not lookup host or port-names, select only packets from port 53, IPv6 protocol and specified host(address)		:::Do not lookup host or port-names, select only packets from port 53, IPv6 protocol and specified host(address)

	In the output Flags are reported that have following meaning:		In the output Flags are reported that have following meaning:
	~~<code>~~		S (SYN)
	S (SYN),		F (FIN)
	F (FIN),		P (PUSH)
	P (PUSH),		R (RST),
	R (RST),		U (URG),
	U (URG),		W (ECN CWR),
	W (ECN CWR),		E (ECN-Echo)
	E (ECN-Echo)		. (ACK)
	. (ACK)		none if no flags are set...
	none if no flags are set...

Hdridder at 15:59, 2 January 2019

2019-01-02T15:59:45Z

← Older revision		Revision as of 15:59, 2 January 2019
Line 8:		Line 8:
	;:-n port 53 and ip6 and host <address>		;:-n port 53 and ip6 and host <address>
	:::1 Do not lookup host or port-names, select only packets from port 53, IPv6 protocol and specified host(address)		:::1 Do not lookup host or port-names, select only packets from port 53, IPv6 protocol and specified host(address)

			In the output Flags are reported that have following meaning:
			<code>
			S (SYN),
			F (FIN),
			P (PUSH),
			R (RST),
			U (URG),
			W (ECN CWR),
			E (ECN-Echo)
			. (ACK)
			none if no flags are set...

Hdridder: Created page with ";tcpdump :Trace network traffic, all packets send are reported to standard output (terminal). ;:-w -C 10 :::Dump raw data to , create new file after 10 m..."

2018-03-25T19:18:46Z

Created page with ";tcpdump :Trace network traffic, all packets send are reported to standard output (terminal). ;:-w <filename> -C 10 :::Dump raw data to <filename>, create new file after 10 m..."

New page

;tcpdump
:Trace network traffic, all packets send are reported to standard output (terminal).

;:-w <filename> -C 10
:::Dump raw data to <filename>, create new file after 10 million (not 10MB) bytes are written
;:-r <filename> -tttt -X
:::Read packets from <filename>, give absolute time and all data
;:-n port 53 and ip6 and host <address>
:::1 Do not lookup host or port-names, select only packets from port 53, IPv6 protocol and specified host(address)