tcpdump command example

Operating Systems Linux Red Hat tcpdump command example

08-30-2012

Registered User

43, 0

Join Date: May 2012

Last Activity: 30 January 2019, 2:05 AM EST

Posts: 43

Thanks Given: 31

Thanked 0 Times in 0 Posts

tcpdump command example

Hi,

I have linux server in a network with hardware firewall device with ip 192.168.1.1 in front.

we have domain http://t.exaple.com which resolves 192.168.1.10

My admin has blocked ping to 192.168.1.10

Now using tcpdump, how do I check if I am receiving the traffic or not ?

Could somebody post the command and describe how to analyses the dump results..

I read through tcpdump in Internet, but could not get tcpdump command example based on scenarios.

Thanks
ashok

ashokvpp

View Public Profile for ashokvpp

Find all posts by ashokvpp

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. IP Networking

TCPdump

I've recently started learning to use TCPdump, and I find it pretty interesting. There's one thing I don't understand. When I tell it to capture packets on, say, the WiFi interface en1, it often captures packets sent or received by other hosts on the network. How can it do this? My...

2. UNIX for Dummies Questions & Answers

How to update tcpdump?

I would like to update tcpdump on my computer (CentOS 6.5) which is currently old. I download the zip file from TCPDUMP/LIBPCAP public repository already but I don't know how to update with this file. I have to delete tcpdump on my computer first? Would you please provide the step for me?

3. Debian

Tcpdump Help !

Hi. Need Help with TcpDump Trying to sniff associatio-request with tcpdump but when i run this tcpdump -i eth0 wlan subtype assoc-req i get this error can anyone help me with this error ? Thanks alot !!:)

4. Shell Programming and Scripting

Filtering protocol and string in tcpdump command?

Hello to all in forum, Maybe some unix expert could help me. I have the following tcpdump command: tcpdump -i any port 13907 -s 0 -w Out.cap I would like to run tcpdump to only capture data related with especific string. Within the dump the protocol is GSM MAP and the string is Address...

5. IP Networking

tcpdump vs. wireshark

Hi, I am trying to capture manually crafted IP packets, created using Scapy, to a pcap file that can later be replayed using tcpreplay. When using wireshark, I can successfully capture these packets and view them in wireshark. However, when using tcpdump, these packets are then shown in...

6. IP Networking

i would like to know about tcpdump

i would like to know about tcpdump i would like to use tcpdump to get information about these - Date - time - source hostname - source mac address - source ip address - destination ip address - see outbound only then i use command like this tcpdump -i le0 -n -q -tttt -e src net...

7. Cybersecurity

i would like to know about tcpdump

8. UNIX for Dummies Questions & Answers

tcpdump

does anybody know what the -d -dd and -ddd options are used for ? thanks

9. Programming

How To Use tcpdump

I have two net-card. one is 172.16.24.99(ENG) ,another is 172.16.25.99(ENG-B). Both masks is 255.255.255.0. I will monitor data on the tcp port 8055 in ENG, How do I set option of tcpdump command

LEARN ABOUT CENTOS

findsmb

FINDSMB(1)                                                         User Commands                                                        FINDSMB(1)

NAME

       findsmb - list info about machines that respond to SMB name queries on a subnet

SYNOPSIS

       findsmb [subnet broadcast address]

DESCRIPTION

       This perl script is part of the samba(7) suite.

       findsmb is a perl script that prints out several pieces of information about machines on a subnet that respond to SMB name query requests.
       It uses nmblookup(1) and smbclient(1) to obtain this information.

OPTIONS

       -r
           Controls whether findsmb takes bugs in Windows95 into account when trying to find a Netbios name registered of the remote machine. This
           option is disabled by default because it is specific to Windows 95 and Windows 95 machines only. If set, nmblookup(1) will be called
           with -B option.

       subnet broadcast address
           Without this option, findsmb will probe the subnet of the machine where findsmb(1) is run. This value is passed to nmblookup(1) as part
           of the -B option.

EXAMPLES

       The output of findsmb lists the following information for all machines that respond to the initial nmblookup for any name: IP address,
       NetBIOS name, Workgroup name, operating system, and SMB server version.

       There will be a '+' in front of the workgroup name for machines that are local master browsers for that workgroup. There will be an '*' in
       front of the workgroup name for machines that are the domain master browser for that workgroup. Machines that are running Windows for
       Workgroups, Windows 95 or Windows 98 will not show any information about the operating system or server version.

       The command with -r option must be run on a system without nmbd(8) running. If nmbd is running on the system, you will only get the IP
       address and the DNS name of the machine. To get proper responses from Windows 95 and Windows 98 machines, the command must be run as root
       and with -r option on a machine without nmbd running.

       For example, running findsmb without -r option set would yield output similar to the following

           IP ADDR         NETBIOS NAME   WORKGROUP/OS/VERSION
           ---------------------------------------------------------------------
           192.168.35.10   MINESET-TEST1  [DMVENGR]
           192.168.35.55   LINUXBOX      *[MYGROUP] [Unix] [Samba 2.0.6]
           192.168.35.56   HERBNT2        [HERB-NT]
           192.168.35.63   GANDALF        [MVENGR] [Unix] [Samba 2.0.5a for IRIX]
           192.168.35.65   SAUNA          [WORKGROUP] [Unix] [Samba 1.9.18p10]
           192.168.35.71   FROGSTAR       [ENGR] [Unix] [Samba 2.0.0 for IRIX]
           192.168.35.78   HERBDHCP1     +[HERB]
           192.168.35.88   SCNT2         +[MVENGR] [Windows NT 4.0] [NT LAN Manager 4.0]
           192.168.35.93   FROGSTAR-PC    [MVENGR] [Windows 5.0] [Windows 2000 LAN Manager]
           192.168.35.97   HERBNT1       *[HERB-NT] [Windows NT 4.0] [NT LAN Manager 4.0]

VERSION

       This man page is correct for version 3 of the Samba suite.

SEE ALSO

       nmbd(8), smbclient(1), and nmblookup(1)

AUTHOR

       The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open
       Source project similar to the way the Linux kernel is developed.

       The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another excellent piece of Open
       Source software, available at ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to
       DocBook for Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for Samba 3.0 was done by Alexander Bokovoy.

Samba 3.5                                                           06/18/2010                                                          FINDSMB(1)

Red Hat