Shulou(Shulou.com)06/02 Report--

This article will explain in detail about using linux's tcpdump command to monitor network traffic. The editor thinks it is very practical, so I share it with you as a reference. I hope you can get something after reading this article.

The tcpdump command is a sniffer tool, a packet grabbing tool and sniffer on linux; it can print out the header information of all packets passing through the network interface.

When the tcpdump command works, it is necessary to switch the working mode of the network card to hybrid mode. So the tcpdump command needs to be run as root. Tcpdump command is the most widely used network protocol analysis tool under linux. When using the tcpdump command, you must be proficient in how the TCP/IP protocol works.

Syntax format: tcpdump [parameters]

Common parameters:

Reference example

Monitor packets for the specified network interface:

[root@linuxcool] # tcpdump-I eth2

Monitor packets for the specified host:

[root@linuxcool ~] # tcpdump host linuxcool

Intercept communication between host 192.168.10.10 and host 192.168.10.20 or 192.168.10.30:

[root@linuxcool ~] # tcpdump host 192.168.10.10 and\ (192.168.10.20 or 192.168.10.30\)

Grab the HTTP message at port 80 and display it as text:

[root@linuxcool] # tcpdump-i any port 80-A so much for using linux's tcpdump command to monitor network traffic. I hope the above content can be helpful to you and learn more. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.