CYSA+ TCPDump
sudo tcpdump -i wlan0 - ANS-Tells tcpdump to capture everything on the network
interface called wlan0
sudo tcpdump -i enp0s3 > ~/data.txt - ANS-Tells tcpdump to capture everything in a
packet except for the payload, specifying the network interface and redirecting the
results to a text file.
sudo tcpdump -D - ANS-Lists all network interfaces available to perform packet capture
on.
sudo tcpdump -n - ANS-Tells tcpdump to not perform DNS lookup
sudo tcpdump -v - ANS-Runs tcpdump in verbose mode
sudo tcpdump -e - ANS-Tells tcpdump to include link-level headers to print MAC layer
addresses for protocols. Useful for packet capture.
sudo tcpdump -i wlan01 -c 10 -n ARP - ANS-Tells tcpdump to collect 10 ARP packets
from network interface wlan01
sudo tcpdump -i 2 -c 10 src 10.73.31.70 - ANS-Tells tcpdump to capture the first 10
packets from interface 2 coming from source 10.73.31.70.
sudo tcpdump -i 2 -c 10 dst 10.73.32.60 - ANS-Tells tcpdump to capture the first 10
packets from interface 2 coming from source 10.73.32.60
sudo tcpdump -r file.pcap - ANS-Tells tcpdump to read the contents of file.pcap
sudo tcpdump -i wlan0 -c 10 -w file.pcap - ANS-Tells tcpdump to write a file called
file.pcap containing the first 10 packets captured off the network interface called wlan0
sudo tcpdump -i wlan0 - ANS-Tells tcpdump to capture everything on the network
interface called wlan0
sudo tcpdump -i enp0s3 > ~/data.txt - ANS-Tells tcpdump to capture everything in a
packet except for the payload, specifying the network interface and redirecting the
results to a text file.
sudo tcpdump -D - ANS-Lists all network interfaces available to perform packet capture
on.
sudo tcpdump -n - ANS-Tells tcpdump to not perform DNS lookup
sudo tcpdump -v - ANS-Runs tcpdump in verbose mode
sudo tcpdump -e - ANS-Tells tcpdump to include link-level headers to print MAC layer
addresses for protocols. Useful for packet capture.
sudo tcpdump -i wlan01 -c 10 -n ARP - ANS-Tells tcpdump to collect 10 ARP packets
from network interface wlan01
sudo tcpdump -i 2 -c 10 src 10.73.31.70 - ANS-Tells tcpdump to capture the first 10
packets from interface 2 coming from source 10.73.31.70.
sudo tcpdump -i 2 -c 10 dst 10.73.32.60 - ANS-Tells tcpdump to capture the first 10
packets from interface 2 coming from source 10.73.32.60
sudo tcpdump -r file.pcap - ANS-Tells tcpdump to read the contents of file.pcap
sudo tcpdump -i wlan0 -c 10 -w file.pcap - ANS-Tells tcpdump to write a file called
file.pcap containing the first 10 packets captured off the network interface called wlan0
