up vote 2 down vote favorite
share [g+] share [fb]

What programs under Linux can capture ethernet traffic? And which ones from them are maintained and most comfortable?

link|improve this question
There's tcpdump available, it captures traffic on specified network interface. As for other programs, someone with more experience will probably post it as an answer :) – Michael J.V. Apr 20 '11 at 11:08
feedback

migrated from stackoverflow.com Apr 20 '11 at 11:18

This question came from our site for professional and enthusiast programmers.

4 Answers

up vote 4 down vote

tcpdump is awesome for capturing traffic coming into or out of your machine. Ettercap is awesome if you want to MITM traffic. If you prefer a GUI then Wireshark is a good alternative.

Example usage:

tcpdump src 10.0.0.1 port 80

ettercap -T -Q -M arp:remote -i eth0 /10.0.0.1/ // -P remote_browser
link|improve this answer
feedback
up vote 3 down vote

wireshark

link|improve this answer
Don't forget the command line version tshark. – ultrasawblade Apr 26 at 13:15
feedback
up vote 1 down vote

Wireshark is great. Runs on Linux and Windows

link|improve this answer
feedback
up vote 0 down vote

If you want a console-based graphics dump of the ethernet traffic you can use iptraf as well.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard