iptrafic and tcpdump

1. iptrafic

iptrafic -s eth0

2. tcpdump

Capture packets from a particular ethernet interface

# tcpdump -i eth0

Capture only N number of packets

# tcpdump -c N -i eth0

Display Captured Packets in ASCII

# tcpdump -i eth0 -A

Display Captured Packets in HEX and ASCII using tcpdump

# tcpdump -i eth0 -XXX

Capture the packets and write into a file

# tcpdump -i eth0 -w /tmp/a.pcap

Reading the packets from a saved file

# tcpdump -ttt -r /tmp/a.pcap

Capture packets with proper readable timestamp

# tcpdump -ttt

Receive only the packets of a specific protocol type

# tcpdump -i eth0 <prt name>

# tcpdump -i eth0 arp

Receive packets flows on a particular port (eg. ssh port)

# tcpdump -i eth0 port 22

Capture packets for particular destination IP and Port

# tcpdump -i eth0 dst 10.181.140.216 and port 22

Filter Packets

#tcpdump -i eth0 not arp and not rarp