Every now and then;
I like to fire up
tcpdump and just watch the network traffic as the packets flow on by.
user@host:~$ sudo tcpdump -Aevvv
Will parse & print all local network-traffic to the standard output, in real time, instead of writing (saving) to file. It's great for taking a quick glimpse at what's happening on the local network.
It's not uncommon to find packets coming through in larger quantities/at higher speeds than what is comfortable to parse and/or read. In such cases, I usually indicate a desired target host like so:
user@host:~$ sudo tcpdump -Aevvv host security.stackexchange.com
Obviously, the desired target host in this example is
security.stackexchange.com. This is for no reason other than being the first to come to mind and can, of course, be set to any host you like. Using the
host filter can clean up the results quite nicely, but I would like to take it one step further and specify certain HTTP Web Request types such as HEAD, GET, POST, & so on.
To continue in the spirit of our example, I would like to specify a
tcpdump packet-filter rule for capturing HTTP POST Requests; so as to demonstrate what's happening behind the scenes when submitting content to a remote host like
So that is my question: (When using
How can I specify a filter for POST Request packets only?