TCPDump Flashcards
1
Q
Capture packets on eth0 in ASCII hex and write to file
A
tcpdump -i eth0 -XX -w out.pcap
2
Q
Capture HTTP traffice to 2.2.2.2
A
tcpdump -i eth0 port 80 dst 2.2.2.2
3
Q
Show connections to specific IP
A
tcpdump -i eth0 -tttt dst 192.168.1.22 and not net 192.168.1.0/24
4
Q
Print all ping responses
A
tcpdump -i eth0 ‘icmp[icmptype] == icmp-echoreply’
5
Q
Capture 50 DNS packets and print timestamps
A
tcpdump -i etch0 -c 50 -tttt ‘udp and port 53’
