How to create a packet capture file with tcpdump that Wireshark can analyze

Example

tcpdump -n -s 0 -i eth0 -w dump.dat
Blue characters part should be changed appropriately.

Explanation of options

Option Description
-n Show IP address (Don't use DNS)
-s 0 Makes a packet size for capture unlimited
-i Specifies the capture target network device
-w Specifies the capture file name to be created

No comments:

Post a Comment