In Linux can I direct all traffic from a specific ip address or mac address to file.
I am look of a way to take all traffic from a specific ip address or mac address and put it into a file. Does iptables or some other command line level tool let me do this. I know about wireshark which is a great tool, but I looking for a low level command line method to do some thing similar.
I don't really want to install additional software on our servers but would still like to get information about traffic from suspicious IP or mac address. Even if this is in binary. I will write a program to translate it.