Linux ethernet traffic capture

Question

What programs under Linux can capture ethernet traffic? And which ones from them are maintained and most comfortable?

There's tcpdump available, it captures traffic on specified network interface. As for other programs, someone with more experience will probably post it as an answer :)

8088 · Answer 1 · 2011-04-20 15:37:42Z

up vote 4 down vote

tcpdump is awesome for capturing traffic coming into or out of your machine. Ettercap is awesome if you want to MITM traffic. If you prefer a GUI then Wireshark is a good alternative.

Example usage:

tcpdump src 10.0.0.1 port 80

ettercap -T -Q -M arp:remote -i eth0 /10.0.0.1/ // -P remote_browser

edited Apr 20 '11 at 15:37

8088
6,11672445

answered Apr 20 '11 at 14:12

DamianZ
413

Mike Pennington · Answer 2 · 2011-04-20 11:10:01Z

up vote 3 down vote

wireshark

answered Apr 20 '11 at 11:10

Mike Pennington
377315

Don't forget the command line version tshark. – ultrasawblade Apr 26 '12 at 13:15

kostja · Answer 3 · 2011-04-20 11:10:48Z

up vote 1 down vote

Wireshark is great. Runs on Linux and Windows

answered Apr 20 '11 at 11:10

kostja
15219

Liviu Tudor · Answer 4 · 2011-04-21 12:42:20Z

up vote 0 down vote

If you want a console-based graphics dump of the ethernet traffic you can use iptraf as well.

answered Apr 21 '11 at 12:42

Liviu Tudor
111

asked	2 years ago
viewed	370 times
active	2 years ago

Linux ethernet traffic capture

migrated from stackoverflow.com Apr 20 '11 at 11:18

4 Answers

Your Answer

Linked

Linux ethernet traffic capture

migrated from stackoverflow.com Apr 20 '11 at 11:18

4 Answers

Your Answer

Sign up or log in

Post as a guest

Linked

Related