From IT Mission Linux Tips, Hacks, Tutorials, Howtos -

Main: Capture-Analyse-Netowrk-Traffic

Analyzing Network Traffic.

root is in ! ~ tcpdump -D

2.nflog (Linux netfilter log (NFLOG) interface)
3.nfqueue (Linux netfilter queue (NFQUEUE) interface)
5.usbmon1 (USB bus number 1)
6.usbmon2 (USB bus number 2)
7.any (Pseudo-device that captures on all interfaces)

root is in ! ~ tcpdump -nn -l -s 2000 -w packet -i eth1 'port 22'
tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 2000 bytes

Install WireShark and then run

wireshark  [packetfilename]

Retrieved from
Page last modified on October 13, 2014, at 11:53 PM