tcpdump command example

Operating Systems Linux Red Hat tcpdump command example

08-30-2012

Registered User

43, 0

Join Date: May 2012

Last Activity: 30 January 2019, 2:05 AM EST

Posts: 43

Thanks Given: 31

Thanked 0 Times in 0 Posts

tcpdump command example

Hi,

I have linux server in a network with hardware firewall device with ip 192.168.1.1 in front.

we have domain http://t.exaple.com which resolves 192.168.1.10

My admin has blocked ping to 192.168.1.10

Now using tcpdump, how do I check if I am receiving the traffic or not ?

Could somebody post the command and describe how to analyses the dump results..

I read through tcpdump in Internet, but could not get tcpdump command example based on scenarios.

Thanks
ashok

ashokvpp

View Public Profile for ashokvpp

Find all posts by ashokvpp

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. IP Networking

TCPdump

I've recently started learning to use TCPdump, and I find it pretty interesting. There's one thing I don't understand. When I tell it to capture packets on, say, the WiFi interface en1, it often captures packets sent or received by other hosts on the network. How can it do this? My...

2. UNIX for Dummies Questions & Answers

How to update tcpdump?

I would like to update tcpdump on my computer (CentOS 6.5) which is currently old. I download the zip file from TCPDUMP/LIBPCAP public repository already but I don't know how to update with this file. I have to delete tcpdump on my computer first? Would you please provide the step for me?

3. Debian

Tcpdump Help !

Hi. Need Help with TcpDump Trying to sniff associatio-request with tcpdump but when i run this tcpdump -i eth0 wlan subtype assoc-req i get this error can anyone help me with this error ? Thanks alot !!:)

4. Shell Programming and Scripting

Filtering protocol and string in tcpdump command?

Hello to all in forum, Maybe some unix expert could help me. I have the following tcpdump command: tcpdump -i any port 13907 -s 0 -w Out.cap I would like to run tcpdump to only capture data related with especific string. Within the dump the protocol is GSM MAP and the string is Address...

5. IP Networking

tcpdump vs. wireshark

Hi, I am trying to capture manually crafted IP packets, created using Scapy, to a pcap file that can later be replayed using tcpreplay. When using wireshark, I can successfully capture these packets and view them in wireshark. However, when using tcpdump, these packets are then shown in...

6. IP Networking

i would like to know about tcpdump

i would like to know about tcpdump i would like to use tcpdump to get information about these - Date - time - source hostname - source mac address - source ip address - destination ip address - see outbound only then i use command like this tcpdump -i le0 -n -q -tttt -e src net...

7. Cybersecurity

i would like to know about tcpdump

8. UNIX for Dummies Questions & Answers

tcpdump

does anybody know what the -d -dd and -ddd options are used for ? thanks

9. Programming

How To Use tcpdump

I have two net-card. one is 172.16.24.99(ENG) ,another is 172.16.25.99(ENG-B). Both masks is 255.255.255.0. I will monitor data on the tcp port 8055 in ENG, How do I set option of tcpdump command

LEARN ABOUT DEBIAN

vlan-interfaces

VLAN-INTERFACES(5)						   File formats 						VLAN-INTERFACES(5)

NAME

       /etc/network/interfaces (vlan) - vlan extensions for the interfaces(5) file format

DESCRIPTION

       /etc/network/interfaces	contains  network  interface  configuration  information  for  the  ifup(8)  and ifdown(8) commands.  This manpage
       describes the vlan extensions to the standard interfaces(5) file format.

       Primary extensions exist to make and destroy vlan interfaces, secondary extensions exist for ipv4 interface manipulation which  are  gener-
       ally needed when using (a lot of) vlans.

VLAN CREATION

       Vlan  interface	definitions  exist  of the vlan interface name, and an optional 'raw-device' parameter.  Vlan interfaces are numbered 1 to
       4095.  You have the option to have interface names zero-padded to 4 numbers, or just the plain digits without leading zero.  The  following
       example shows four ways to create a vlan with id 1 on interface eth0.  They all result in different names.

	iface eth0.1 inet static
	    address 192.168.1.1
	    netmask 255.255.255.0

	iface vlan1 inet static
	    vlan-raw-device eth0
	    address 192.168.1.1
	    netmask 255.255.255.0

	iface eth0.0001 inet static
	    address 192.168.1.1
	    netmask 255.255.255.0

	iface vlan0001 inet static
	    vlan-raw-device eth0
	    address 192.168.1.1
	    netmask 255.255.255.0

	# We don't have br support out of the box
	iface br0.2 inet static
	    vlan-raw-device br0
	    address 192.168.1.1
	    netmask 255.255.255.0

	# Aliases are ignored
	iface br0.2:1 inet static
	    address 192.168.1.1
	    netmask 255.255.255.255

EXTRA IFACE OPTIONS

       Usually someone who uses vlans also wants to do some other manipulations with the ip stack or interface.

       vlan-raw-device devicename
	      Indicates the device to create the vlan on.  This is ignored when the devicename is part of the vlan interface name.

       ip-proxy-arp 0|1
	      Turn proxy-arp off or on for this specific interface.  This also works on plain ethernet like devices.

       ip-rp-filter 0|1|2
	      Set the return path filter for this specific interface.  This also works on plain ethernet like devices.

       hw-mac-address mac-address
	      This sets the mac address of the interface before bringing it up.  This works on any device that allows setting the hardware address
	      with the ip command.

AUTHOR

       This manpage was adapted from interfaces(5) by Ard van Breemen <ard@kwaak.net>

SEE ALSO

       vconfig(8) interfaces(5)

vlan								 September 30 2007						VLAN-INTERFACES(5)

Red Hat