October 29, 2019 · Basic Pen-Testing
2.3 : Essential Tools - tcpdump (Part IV)
Tcpdump
- cli version of wireshark
- use with
ifconfigto monitor the network interface traffic
Common usages
show help
tcpdump --help
monitor eth0 traffic & print to stdout
tcpdump -i eth0 -v
monitor eth0 traffic & print to stdout & filter traffic from host 192.168.0.1
tcpdump -i eth0 -v host 192.168.0.1
monitor eth0 traffic & print to stdout & filter traffic to host 192.168.0.2
tcpdump -i eth0 -v dst 192.168.0.2
monitor eth0 traffic & filter traffic to host 192.168.0.2 & save it as output.pcap
tcpdump -i eth0 dst 192.168.0.2 -w ./output.pcap
Tutorials