Questions tagged [tcpdump]

Tcpdump prints out a description of the contents of packets on a network interface that match the boolean expression; the description is preceded by a time stamp, printed, by default, as hours, minutes, seconds, and fractions of a second since midnight.

Filter by
Sorted by
Tagged with
1
vote
0answers
14 views

Capture Packets of other devices in network [duplicate]

I'm challenged to capture packets sent from a client to the gateway in a network. is it even possible to see the packets between client and gateway for me?
0
votes
0answers
53 views

Setting the CWR TCP Flag in a Hping Command

I am trying to set the CWR flag when doing a hping command to another machine. I can set all the other flags, (Eg -S, -F etc) but I can't find any example of the CWR flag. I've checked Man Pages and ...
1
vote
1answer
101 views

Public Availability of a good Dataset in PCAP (TCPDUMP) format for IDS/IPS testing [closed]

I am trying to pass good reputable malicious traffic from an IPS. There are several sources on internet to explore datasets like the oldest I think DARPA set (not available in pcap format and not that ...
0
votes
0answers
19 views

Confirming a tcp connection is encrypted not just encoded? [duplicate]

This is a follow up of this question. The accpeted answer suggest using tcpdump -A -c 200 but leaves up the crucial part on how to distinguish whether the data is encrypted and not encoded. What I'm ...
12
votes
4answers
4k views

Eavesdropping vs. sniffing

I'm taking a coursera course, and they take pains when talking about network security to distinguish between eavesdropping and sniffing. According to their definitions, sniffing involves reading or ...