• View
• Edit
• History
• Print

Capture-Analyse-Netowrk-Traffic

Analyzing Network Traffic.

root is in ! ~ tcpdump -D

1.eth0
2.nflog (Linux netfilter log (NFLOG) interface)
3.nfqueue (Linux netfilter queue (NFQUEUE) interface)
4.eth1
5.usbmon1 (USB bus number 1)
6.usbmon2 (USB bus number 2)
7.any (Pseudo-device that captures on all interfaces)
8.lo


root is in ! ~ tcpdump -nn -l -s 2000 -w packet -i eth1 'port 22'
tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 2000 bytes

Install WireShark and then run

wireshark  [packetfilename]