TcpDump

Pointers

• LibPcap - the packet capture library and related tools
• Ethereal - high powered gui packet analysis tool, with command line interface
• SslDump - analyze + decrypt ssl data
• tcpdump2ascii - parses hex output of tcpdump -x -l and prints ascii

• UnixGeekTools - other great tools for unix geeks

Useful Options

  -s 0 = capture complete packets
  -n = don't lookup
  -e = show mac address
  -X = print each packet in hex and ASCII