commandline packet analyzer

learn more… | top users | synonyms

4
votes
2answers
8k views

tcpdump promiscuous mode on OSX 10.8

By examining my wireless router configuration I can see there's 2 IPs assigned: 192.168.1.100 -> laptop (Macbook Air OSX 10.8.2, where I runtcpdump) 192.168.1.101 -> ipad But then if I run: sudo ...
0
votes
2answers
1k views

Discover the public ip of a network without being connected

Let say, I'm next to a network and can see the traffic (with airodump or similar tool) but can not decipher it (because I am not connected on the network). Is it possible to discover the public ip ...
0
votes
1answer
305 views

my tcpdump always filters packets?

I've been using tcpdump for about a month now, and recently, it has stopped capturing any packets that were not sent to or from the computer running tcpdump. I've stripped down my command to just: ...
17
votes
3answers
11k views

Can I monitor a local unix domain socket like tcpdump?

I'd like to monitor responses on a unix socket without disturbing the original connections and pipe them to a script for processing. I know how to do this with tcpdump for tcp connections but I ...
6
votes
5answers
22k views

Practical Tcpdump examples? [closed]

I want to collect tcpdump examples, as many as possible! E.g.: how to filter FTP passwords on eth0; OR how to filter HTTP 404 errors, etc.
2
votes
1answer
959 views

Record multicast stream on multi-homed Linux host

I have what sounds like the simplest possible use case, and yet nothing is satisfactory. I have a multi-homed host and I would like to listen to multicasts on eth1, and shove all the payload (NOT ...
2
votes
2answers
1k views

Why can't I see other computers' traffic in the output of tcpdump?

On LAN, when I use tcpdump on my eth0 interface to monitor packets, nothing happens although other computers are using the internet. It is only when I begin to use internet by visiting a website ...
0
votes
0answers
674 views

Executing tcpdump remotely while storing packet capture locally

I have run into stumbling block while attempting to create a bash script that will write packet capture files from tcpdump onto a remote server, while displaying the output of the tcpdump command so ...