04-10-2008
I don't think so, see the man pages for tcpdump and especially dst port and scr port.
7 More Discussions You Might Find Interesting
1. Programming
I have two net-card. one is 172.16.24.99(ENG) ,another is 172.16.25.99(ENG-B). Both masks is 255.255.255.0.
I will monitor data on the tcp port 8055 in ENG, How do I set option of tcpdump command (2 Replies)
Discussion started by: chenhao_no1
2 Replies
2. Cybersecurity
i would like to know about tcpdump
i would like to use tcpdump to get information about these
- Date
- time
- source hostname
- source mac address
- source ip address
- destination ip address
- see outbound only
then i use command like this
tcpdump -i le0 -n -q -tttt -e src net... (0 Replies)
Discussion started by: chamnanpol
0 Replies
3. Solaris
Hi everyone,
I am hoping anyone of you could help me in this weird problem we have in 1 of our Solaris 10 servers. Lately, we have been having some ftp problems in this server. Though it can ping any server within the network, it seems that it can only ftp to a select few. For most servers, the... (4 Replies)
Discussion started by: labdakos
4 Replies
4. Ubuntu
I'm on Ubuntu – but it's the same on Debian.
I'm using tcpdump in order to track the connection of computers on my private network. At some point, the internet connection of the computers launching the script is lost as well as the targeted computers.
Here's the command line:
tcpdump -i wlan0... (0 Replies)
Discussion started by: Skirmjan
0 Replies
5. UNIX for Advanced & Expert Users
Hi everybody,
I am running a program on a supercomputer via my personal computer through a ssh connection. My program take more than a day to run, so when I left work with my PC I stop the connection with the supercomputer and the program stop.
I am wondering if someone know how I can manage... (2 Replies)
Discussion started by: TomTomGre
2 Replies
6. Debian
Hi.
Need Help with TcpDump
Trying to sniff associatio-request with tcpdump but when i run this tcpdump -i eth0 wlan subtype assoc-req i get this error
can anyone help me with this error ? Thanks alot !!:) (1 Reply)
Discussion started by: SoulZB
1 Replies
7. IP Networking
I've recently started learning to use TCPdump, and I find it pretty interesting. There's one thing I don't understand. When I tell it to capture packets on, say, the WiFi interface en1, it often captures packets sent or received by other hosts on the network. How can it do this? My... (3 Replies)
Discussion started by: Ultrix
3 Replies
RASORT(1) General Commands Manual RASORT(1)
NAME
rasort - sort argus(8) data file.
COPYRIGHT
Copyright (c) 2000-2003 QoSient. All rights reserved.
SYNOPSIS
rasort [[-M sortmode] [sortmode] ...] [raoptions]
DESCRIPTION
Rasort reads argus data from an argus-data source, sorts the records based on the criteria specified on the command line, and outputs a
valid argus-stream.
OPTIONS
Rasort, like all ra based clients, supports a number of ra options including filtering of input argus records through a terminating filter
expression. See ra(1) for a complete description of ra options. rasort(1) specific options are:
-M sortmode Supported sortmodes are:
time record start time <default>
startime record start time <default>
lasttime record last time.
trans aggregation record count.
dur record total duration.
avgdur record average duration.
saddr source IP addr.
daddr destination IP addr.
proto transaction protocol.
sport source port number.
dport destination port number.
stos source TOS byte value.
dtos destination TOS byte value.
sttl src -> dst TTL value.
dttl dst -> src TTL value.
bytes total transaction bytes.
sbytes src -> dst transaction bytes.
dbytes dst -> src transaction bytes.
pkts total transaction packet count.
spkts src -> dst packet count.
dpkts dst -> src packet count.
load bits per second.
loss pkts retransmitted or dropped.
rate pkts per second.
tranref argus transaction reference number.
seq argus sequence number.
srcid argus source identifier.
INVOCATION
A sample invocation of rasort(1). This call reads argus(8) data from inputfile and sorts the IP protocol based argus(8) data, first by the
destination IP address, then by the service (destination) port number and then by the source IP address, and writes the results to stdout.
For most services, this arranges argus(8) formatted data by server, service, and then by client.
rasort -r inputfile -M daddr dport saddr - ip
SEE ALSO
ra(1), rarc(5), argus(8), tcpdump(1)
FILES
AUTHORS
Carter Bullard (carter@qosient.com).
BUGS
07 November 2000 RASORT(1)