Linux Networking and

Troubleshooting
Packet Captures

Linux Networking and Troubleshooting

PACKET CAPTURES :: OVERVIEW

Source
Destination

Capture Filters Display Filters

Set prior to the capture, and used to Set during packet capture viewing, and used for
reduce the size of the raw packet capture viewing the packet capture

Linux Networking and Troubleshooting

PACKET CAPTURES :: CAPTURE FILTERS

tcpdump tshark
tcpdump -i eth0 –w capture.pcap tshark -i eth0 -w capture.pcap
tcpdump –i eth0 –w capture.pcap port not 22 tshark –i eth0 –w capture.pcap port not 22

Linux Networking and Troubleshooting