TCPDUMP to capture Netowrk Traffic

tcpdump is a network utility that listeners and capture network traffic.  It can be useful in investigating network problem.  Running tcpdump needs to be run as root in able to sniff network packets.
tcpdump -D to get a list of network interfaces on the system
1.eth0
2.eth1
3.eth2
4.any (Pseudo-device that captures on all interfaces)
5.lo

tcpdump -i eth0 -s 65535 -W dump
65535:  max size allowed
w:  outputs captured information to the specified file.  dump is the filename

To show the packets being transferred across the private interconnect:
tcpdump -i 2 | more

No comments:

Post a Comment