TCPdump Tutorial for Beginners

1001

Tcpdump is a UNIX/Linux command line tool used to sniff and analyze network packets. Tcpdump offers similar functionality to that of the popular Wireshark application when used in command line mode and allows you to apply various filters to limit packet collection or packet output.

This is an introductory tutorial to tcpdump, filtering packets, as well as applying various filters and expressions.

http://dillonhale.com/blog/linux-tutorials/tcpdump-primer/