2,306
edits
Changes
Jump to navigation
Jump to search
Line 20:
Line 20: + − You can skip additional ports too:+ + + + + + + + + + + + + + + − + + − You can also use ip or hostname:+ + + − + +
no edit summary
-E : Decrypt IPSEC traffic by providing an encryption key.</nowiki>
-E : Decrypt IPSEC traffic by providing an encryption key.</nowiki>
=== 1500 bytes capture excluding port 22 ===
tcpdump -i eth1 -s 1500 port not 22
tcpdump -i eth1 -s 1500 port not 22
=== Skip ports ===
tcpdump -i eth1 -s 1500 port not 22 and port not 53
=== Filter ip or hostname ===
tcpdump -i eth1 port not 22 and host 1.2.3.4
=== Raw output view ===
tcpdump -ttttnnvvS
=== Hex output ===
tcpdump -nnvXSs 0 -c1 icmp
=== Filter by source or destination
tcpdump src 2.3.4.5
tcpdump dst 3.4.5.6
tcpdump -i eth1 -s 1500 port not 22 and port not 53
=== Filter by net ===
tcpdump net 1.2.3.0/24
=== Filter by port ===
tcpdump port 3389
tcpdump src port 3389
tcpdump -i eth1 port not 22 and host 1.2.3.4
=== Filter by protocol ===
tcpdump icmp