| -n | Don’t resolve hostnames |
| -nn | Don’t resolve hostnames @ port names |
| -X | Show the packet’s content in both hex & ASCII |
| -v, -vv, -vvv | Increase the amount of packet information you get back |
| -c | Only get x number of packets and then stop |
| -S | Print absolute sequence numbers |
| -e | Get the Ethernet header as well |
| tcpdump –nS | Basic communication |
| tcpdump -nnvvS | Basic communication (very verbose) |
| tcpdump -nnvvSX | A deeper look at the traffic |
| tcpdump -nnvvSXs | Heavy packet viewing |
http://dmiessler.com/study/tcpdump/
No comments:
Post a Comment