3

What programs under Linux can capture ethernet traffic? And which ones from them are maintained and most comfortable?

Improve this question
1
  • There's tcpdump available, it captures traffic on specified network interface. As for other programs, someone with more experience will probably post it as an answer :)
    – Michael J.V.
    Apr 20, 2011 at 11:08

4 Answers 4

Reset to default
4

tcpdump is awesome for capturing traffic coming into or out of your machine. Ettercap is awesome if you want to MITM traffic. If you prefer a GUI then Wireshark is a good alternative.

Example usage:

tcpdump src 10.0.0.1 port 80

ettercap -T -Q -M arp:remote -i eth0 /10.0.0.1/ // -P remote_browser
Improve this answer
3

wireshark

Improve this answer
1
  • Don't forget the command line version tshark.
    – LawrenceC
    Apr 26, 2012 at 13:15
1

Wireshark is great. Runs on Linux and Windows

Improve this answer
0

If you want a console-based graphics dump of the ethernet traffic you can use iptraf as well.

Improve this answer

You must log in to answer this question.