07-03-2008
You cannot get hostname directly from an IP packet. Packets carry IP addresses , not hostnames.
9 More Discussions You Might Find Interesting
1. Programming
I have two net-card. one is 172.16.24.99(ENG) ,another is 172.16.25.99(ENG-B). Both masks is 255.255.255.0.
I will monitor data on the tcp port 8055 in ENG, How do I set option of tcpdump command (2 Replies)
Discussion started by: chenhao_no1
2 Replies
2. UNIX for Dummies Questions & Answers
does anybody know what the -d -dd and -ddd options are used for ?
thanks (2 Replies)
Discussion started by: ant04
2 Replies
3. IP Networking
Hi, I got the following question regarding tcpdump and I would appreciate your help/feedback:
--Scenario
I am instructed to capture the network traffic by getting the tcpdump data/files of our network for every hour.
--Problem
Some of the connections are still open when the capture is done... (1 Reply)
Discussion started by: jinsunnyvale
1 Replies
4. Cybersecurity
i would like to know about tcpdump
i would like to use tcpdump to get information about these
- Date
- time
- source hostname
- source mac address
- source ip address
- destination ip address
- see outbound only
then i use command like this
tcpdump -i le0 -n -q -tttt -e src net... (0 Replies)
Discussion started by: chamnanpol
0 Replies
5. Linux
Hi,
I want to capture TCPDUMP of traffic, I tried doing this but did not find success..can anyone plz correct it.
# tcpdump -s0 -vv -w /home/osuresh/test_tcp_dump host 10.12.10.22 && port 161
bash: tcpdump: command not found
# tcpdump -s0 -vv -w /home/osuresh/test_tcp_dump host... (5 Replies)
Discussion started by: sureshcisco
5 Replies
6. UNIX for Dummies Questions & Answers
Hi Everyone,
anyone face "tcpdump -i any" does not work? i mean if i use -i eth0, can capture eth0, or use -i eth1 also can. but then tcpdump -i any, seems cannot capture packets. :confused:
please advice, thanks (2 Replies)
Discussion started by: jimmy_y
2 Replies
7. Shell Programming and Scripting
I'm new to the Unix/Linux world. I have taken classes and played with a few simple scripts but never had a real world application. Here is my problem.
What I need to do is every 15min between 8am and 5pm, run
tcpdump -s 2000 -w flowroute-0000.pcap
where the "0000" is the current time.
... (4 Replies)
Discussion started by: Nasasdge
4 Replies
8. Debian
Hi.
Need Help with TcpDump
Trying to sniff associatio-request with tcpdump but when i run this tcpdump -i eth0 wlan subtype assoc-req i get this error
can anyone help me with this error ? Thanks alot !!:) (1 Reply)
Discussion started by: SoulZB
1 Replies
9. IP Networking
I've recently started learning to use TCPdump, and I find it pretty interesting. There's one thing I don't understand. When I tell it to capture packets on, say, the WiFi interface en1, it often captures packets sent or received by other hosts on the network. How can it do this? My... (3 Replies)
Discussion started by: Ultrix
3 Replies
LEARN ABOUT DEBIAN
tcpdump2xplot
TCPDUMP2XPLOT(1) BSD General Commands Manual TCPDUMP2XPLOT(1)
NAME
tcpdump2xplot -- converts tcpdump output to xplot input for analysis
SYNOPSIS
tcpdump2xplot [-?] [-c] [-help] [-list[filename]] [-plot[filename]] [-q] [-r] [-s] [-t] [-w]
DESCRIPTION
tcpdump2xplot takes the output of
tcpdump -tt -S ...
and plots it in terms of sequence-number versus time, with other info displayed (e.g., the TCP window, acks, etc.).
OPTIONS
-?, -help prints a help message. -c, ``cumulative'', adds all the data coming from a server. -list[filename] prints the list of generated
plot files to filename. -plot[filename] plots the packets from filename. The filename may be built out of a hostname and port number, e.g.:
abc.def.com:1234. The default is
fromhost:fromport-tohost:toport.xplot
where fromhost, fromport, thost, toport are extracted as conversations from the tcpdump data. -q means "quiet" --- no visible output. -r
means use relative sequence numbers. -s means break up conversations on TCP syns. -t convert time to decimal number of seconds. -w plots
the TCP window.
EXAMPLES
SEE ALSO
tcpdump(1), xplot.org(1)
BUGS
tcpdump2xplot may not deal properly with output from tcpdump that is not TCP. Either filter to only tcp or be careful.
HISTORY
The tcpdump2xplot has been contributed by xplot.org users. Thanks to Garret Wollman for contributing the original tcpdump2xplot.pl script
and thanks to Eric Prud'hommeaux (@ w3.org) for making <http://www.w3.org/pub/WWW/config/tcpdump2xplot.pl> available, a much improved ver-
sion. The one included here is a slightly improved version of Eric's.
BSD
27 January 1999 BSD