tcpdump command example

Operating Systems Linux Red Hat tcpdump command example

08-30-2012

Registered User

43, 0

Join Date: May 2012

Last Activity: 30 January 2019, 2:05 AM EST

Posts: 43

Thanks Given: 31

Thanked 0 Times in 0 Posts

tcpdump command example

Hi,

I have linux server in a network with hardware firewall device with ip 192.168.1.1 in front.

we have domain http://t.exaple.com which resolves 192.168.1.10

My admin has blocked ping to 192.168.1.10

Now using tcpdump, how do I check if I am receiving the traffic or not ?

Could somebody post the command and describe how to analyses the dump results..

I read through tcpdump in Internet, but could not get tcpdump command example based on scenarios.

Thanks
ashok

ashokvpp

View Public Profile for ashokvpp

Find all posts by ashokvpp

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. IP Networking

TCPdump

I've recently started learning to use TCPdump, and I find it pretty interesting. There's one thing I don't understand. When I tell it to capture packets on, say, the WiFi interface en1, it often captures packets sent or received by other hosts on the network. How can it do this? My...

2. UNIX for Dummies Questions & Answers

How to update tcpdump?

I would like to update tcpdump on my computer (CentOS 6.5) which is currently old. I download the zip file from TCPDUMP/LIBPCAP public repository already but I don't know how to update with this file. I have to delete tcpdump on my computer first? Would you please provide the step for me?

3. Debian

Tcpdump Help !

Hi. Need Help with TcpDump Trying to sniff associatio-request with tcpdump but when i run this tcpdump -i eth0 wlan subtype assoc-req i get this error can anyone help me with this error ? Thanks alot !!:)

4. Shell Programming and Scripting

Filtering protocol and string in tcpdump command?

Hello to all in forum, Maybe some unix expert could help me. I have the following tcpdump command: tcpdump -i any port 13907 -s 0 -w Out.cap I would like to run tcpdump to only capture data related with especific string. Within the dump the protocol is GSM MAP and the string is Address...

5. IP Networking

tcpdump vs. wireshark

Hi, I am trying to capture manually crafted IP packets, created using Scapy, to a pcap file that can later be replayed using tcpreplay. When using wireshark, I can successfully capture these packets and view them in wireshark. However, when using tcpdump, these packets are then shown in...

6. IP Networking

i would like to know about tcpdump

i would like to know about tcpdump i would like to use tcpdump to get information about these - Date - time - source hostname - source mac address - source ip address - destination ip address - see outbound only then i use command like this tcpdump -i le0 -n -q -tttt -e src net...

7. Cybersecurity

i would like to know about tcpdump

8. UNIX for Dummies Questions & Answers

tcpdump

does anybody know what the -d -dd and -ddd options are used for ? thanks

9. Programming

How To Use tcpdump

I have two net-card. one is 172.16.24.99(ENG) ,another is 172.16.25.99(ENG-B). Both masks is 255.255.255.0. I will monitor data on the tcp port 8055 in ENG, How do I set option of tcpdump command

LEARN ABOUT DEBIAN

oidentd_masq.conf

oidentd_masq.conf(5)						File Formats Manual					      oidentd_masq.conf(5)

NAME

       oidentd_masq.conf - oidentd IP masquerading/NAT configuration file.

DESCRIPTION

       If you are using IP masquerading or NAT, oidentd can optionally return a username for connections from other machines.  Support for this is
       specified by calling oidentd with the -m (or --masq) flag and by creating an /etc/oidentd_masq.conf file.

       oidentd can also forward requests for an IP masqueraded connection to the machine from which connection originates by way of the -f option.
       This  will  only  work if the host to which the connection is forwarded is running oidentd with the -P (proxy) flag, or if the host's ident
       daemon will return a valid reply regardless of the input supplied by and the address of the host requesting the info  (some  ident  daemons
       for windows do this, maybe others).

FORMAT

       <IP Address|Hostname>[/<Mask>] <Ident Response> <System Type>

       The  first  field  contains the IP address or the hostname of a machine that IP masquerades through the machine on which oidentd runs.  The
       mask parameter can be either a network mask or a mask in CIDR notation.	A mask of 24 is equivalent to  255.255.255.0,  a  mask	of  16	is
       equivalent to 255.255.0.0, etc.

       The second field specifies the reply that oidentd will return for lookups to the host matching the IP address specified in the first param-
       eter.

       The third field specifies the operating system the machine matching the first parameter is running.

EXAMPLES

       <Host>[/<Mask>]		<Ident Response>    <System Type>
       192.168.1.1		     someone		 UNIX
       192.168.1.2		     noone		 WINDOWS
       192.168.1.1/32		     user1		 UNIX
       192.168.1.0/24		     user3		 UNIX
       192.168.0.0/16		     user4		 UNIX
       somehost 		     user5		 UNIX
       192.168.1.0/255.255.255.0     user6		 UNIX

AUTHOR

       Ryan McCabe <ryan@numb.org>
       http://dev.ojnk.net

SEE ALSO

       oidentd(8) oidentd.conf(5)

version 2.0.8							    13 Jul 2003 					      oidentd_masq.conf(5)

Red Hat