Differences

This shows you the differences between two versions of the page.

--- apps:tcpdump [2019-04-26 10:44] – [Dump for Wireshark with rotation] root
+++ apps:tcpdump [2023-09-09 15:13] (current) – Manuel Frei
@@ Line 10: / Line 10: @@
 ==== Port include ====
 <code bash>
-# tcpdump -n -tttt -i rl0 dst port 221027
+tcpdump -n -tttt -i rl0 dst port 221027
 </code>
 ==== Host include ====
 <code bash>
-# tcpdump -n -tttt -i rl0 host 192.168.10.2
+tcpdump -n -tttt -i rl0 host 192.168.10.2
 </code>
 ==== SSH exclude ====
 <code bash>
-# tcpdump -n -i rl0 'not port 22'
+tcpdump -n -i rl0 'not port 22'
 </code>
 ==== Dump full Packages for Wireshark ====
 <code bash>
-# tcpdump -s 65535 -w /tmp/test.pcap
+tcpdump -s 65535 -w /tmp/test.pcap
 </code>
 ==== Filter IPv6 Network ====
 <code bash>
-# tcpdump -n 'net 2001:470:26:6bd::/64 and port 443'
+tcpdump -n 'net 2001:470:26:6bd::/64 and port 443'
 </code>
 ==== Show IPsec packets ====
 <code bash>
-# tcpdump -i igb0 -n -p 'udp port 500 or udp port 4500 or ip proto 50'
+tcpdump -i igb0 -n -p 'udp port 500 or udp port 4500 or ip proto 50'
 </code>
 ==== Dump for Wireshark with rotation ====
 <code bash>
-# tcpdump -i lo -G $((10*60)) -s 65535 -w /tmp/test.%Y-%m-%dT%H:%M.pcap -Z root
+tcpdump -i lo -G $((10*60)) -s 65535 -w /tmp/test.%Y-%m-%dT%H:%M.pcap -Z root
 </code>