Differences

This shows you the differences between two versions of the page.

--- wiki:tcpdump_more [2021/02/25 23:11] – created walkeradmin
+++ wiki:tcpdump_more [2023/03/09 22:35] (current) – external edit 127.0.0.1
@@ Line 34: / Line 34: @@
 ----
+\\
+<color #ed1c24>tcpdump -i eth0 -nn -w capfile.pcap</color>
+\\
+\\
+A simple tcpdump capture. <color #ed1c24>-w is write</color>.
+\\
+\\
+Can be combined with <color #ed1c24>-Q in/out</color>
+\\
+\\
+<color #ed1c24>tcpdump -i eth0 -nn -Q out -w capfile.pcap</color>
+\\
+\\
+This captures only the ouput traffic on the interface eth0
+\\
+\\
+----
+\\
+<color #7092be>tcpdump -i eth0 -nn port 5555</color>
+\\
+\\
+Shows only traffic using port 5555.
+\\
+\\
+Can be combined with <color #7092be>-Q in/out</color>
+\\
+\\
+<color #7092be>tcpdump -i ens192 -nn -Q in port 5555</color>
+\\
+\\
+Shows only traffic on port 5555 coming in to eth0
+\\
 \\
+----