Saturday, 23 April 2016

How to take TCP dump ?


Run below command just before you perform any action :
tcpdump -s0 -X -x -i eth1 -vvv -w /tmp/testinfo.trc

Perform the operation.

Press Ctr+C  for stop the tcpdump on the server.

To convert raw files to visible the file on the server : 

strings /tmp/testinfo.trc > /tmp/testinfo.txt

Take the file to the local.

No comments:

Post a Comment

Note: only a member of this blog may post a comment.