How To Use tcpdump

9 More Discussions You Might Find Interesting

1. IP Networking

TCPdump

I've recently started learning to use TCPdump, and I find it pretty interesting. There's one thing I don't understand. When I tell it to capture packets on, say, the WiFi interface en1, it often captures packets sent or received by other hosts on the network. How can it do this? My...

2. Debian

Tcpdump Help !

Hi. Need Help with TcpDump Trying to sniff associatio-request with tcpdump but when i run this tcpdump -i eth0 wlan subtype assoc-req i get this error can anyone help me with this error ? Thanks alot !!:)

3. Shell Programming and Scripting

TCPdump script

I'm new to the Unix/Linux world. I have taken classes and played with a few simple scripts but never had a real world application. Here is my problem. What I need to do is every 15min between 8am and 5pm, run tcpdump -s 2000 -w flowroute-0000.pcap where the "0000" is the current time. ...

4. UNIX for Dummies Questions & Answers

tcpdump -i any does not work

Hi Everyone, anyone face "tcpdump -i any" does not work? i mean if i use -i eth0, can capture eth0, or use -i eth1 also can. but then tcpdump -i any, seems cannot capture packets. :confused: please advice, thanks

5. Linux

Capturing TCPDUMP

Hi, I want to capture TCPDUMP of traffic, I tried doing this but did not find success..can anyone plz correct it. # tcpdump -s0 -vv -w /home/osuresh/test_tcp_dump host 10.12.10.22 && port 161 bash: tcpdump: command not found # tcpdump -s0 -vv -w /home/osuresh/test_tcp_dump host...

6. IP Networking

i would like to know about tcpdump

i would like to know about tcpdump i would like to use tcpdump to get information about these - Date - time - source hostname - source mac address - source ip address - destination ip address - see outbound only then i use command like this tcpdump -i le0 -n -q -tttt -e src net...

7. Cybersecurity

i would like to know about tcpdump

8. IP Networking

tcpdump question

Hi, I got the following question regarding tcpdump and I would appreciate your help/feedback: --Scenario I am instructed to capture the network traffic by getting the tcpdump data/files of our network for every hour. --Problem Some of the connections are still open when the capture is done...

9. UNIX for Dummies Questions & Answers

tcpdump

does anybody know what the -d -dd and -ddd options are used for ? thanks

LEARN ABOUT X11R4

netmasks

netmasks(4)                                                        File Formats                                                        netmasks(4)

NAME

       netmasks - network mask database

SYNOPSIS

       /etc/inet/netmasks

       /etc/netmasks

DESCRIPTION

       The  netmasks file contains network masks used to implement IP subnetting. It supports both standard subnetting as specified in RFC-950 and
       variable length subnetting as specified in RFC-1519. When using standard subnetting there should be a single line for each network that  is
       subnetted in this file with the network number, any number of SPACE or TAB characters, and the network mask to use on that network. Network
       numbers and masks may be specified in the conventional IP `.' (dot) notation (like IP host addresses, but with zeroes for the  host  part).
       For example,

                               128.32.0.0    255.255.255.0

       can be used to specify that the Class B network 128.32.0.0 should have eight bits of subnet field and eight bits of host field, in addition
       to the standard sixteen bits in the network field.

       When using variable length subnetting, the format is identical. However, there should be a line for each subnet with the  first field being
       the  subnet  and the second field being the netmask that applies to that subnet. The users of the database, such as ifconfig(1M), perform a
       lookup to find the longest possible matching mask. It is possible to combine the  RFC-950 and  RFC-1519 form of subnet masks  in  the  net-
       masks file. For example,

                               128.32.0.0     255.255.255.0
                               128.32.27.0    255.255.255.240
                               128.32.27.16   255.255.255.240
                               128.32.27.32   255.255.255.240
                               128.32.27.48   255.255.255.240
                               128.32.27.64   255.255.255.240
                               128.32.27.80   255.255.255.240
                               128.32.27.96   255.255.255.240
                               128.32.27.112  255.255.255.240
                               128.32.27.128  255.255.255.240
                               128.32.27.144  255.255.255.240
                               128.32.27.160  255.255.255.240
                               128.32.27.176  255.255.255.240
                               128.32.27.192  255.255.255.240
                               128.32.27.208  255.255.255.240
                               128.32.27.224  255.255.255.240
                               128.32.27.240  255.255.255.240
                               128.32.64.0    255.255.255.192

       can  be  used  to  specify  different  netmasks  in different parts of the 128.32.0.0 Class B network number. Addresses 128.32.27.0 through
       128.32.27.255 have a subnet mask with 28 bits in the combined network and subnet fields  (often referred to as the subnet field) and 4 bits
       in  the  host  field.   Furthermore,  addresses  128.32.64.0  through  128.32.64.63  have a 26 bits in the subnet field. Finally, all other
       addresses in the range 128.32.0.0 through 128.32.255.255 have a 24 bit subnet field.

       Invalid entries are ignored.

SEE ALSO

       ifconfig(1M), inet(7P)

       Postel, Jon, and Mogul, Jeff, Internet Standard Subnetting Procedure, RFC 950, Network Information Center, SRI International,  Menlo  Park,
       Calif., August 1985.

       V.  Fuller,  T.  Li,  J. Yu, K. Varadhan, Classless Inter-Domain  Routing (CIDR): an Address Assignment and Aggregation Strategy, RFC 1519,
       Network Information Center, SRI International, Menlo Park, Calif., September 1993.

       T. Pummill, B. Manning, Variable Length Subnet Table For IPv4, RFC 1878, Network Information Center, SRI International, Menlo Park, Calif.,
       December 1995.

NOTES

       /etc/inet/netmasks is the official SVr4 name of the netmasks file.  The symbolic link /etc/netmasks exists for BSD compatibility.

SunOS 5.10                                                          7 Jan 1997                                                         netmasks(4)

Programming