Questions tagged [tcpdump]

Tcpdump prints out a description of the contents of packets on a network interface that match the boolean expression; the description is preceded by a time stamp, printed, by default, as hours, minutes, seconds, and fractions of a second since midnight.

Filter by
Sorted by
Tagged with
12
votes
4answers
5k views

Eavesdropping vs. sniffing

I'm taking a coursera course, and they take pains when talking about network security to distinguish between eavesdropping and sniffing. According to their definitions, sniffing involves reading or ...
8
votes
1answer
3k views

Wireshark tcp filter: tcp[((tcp[12:1] & 0xf0) >> 2):4]

While reading this doc https://wiki.wireshark.org/CaptureFilters I found this line: tcp[((tcp[12:1] & 0xf0) >> 2):4] which figures out the TCP Header Length, but I can't find out how it ...
1
vote
1answer
151 views

Public Availability of a good Dataset in PCAP (TCPDUMP) format for IDS/IPS testing [closed]

I am trying to pass good reputable malicious traffic from an IPS. There are several sources on internet to explore datasets like the oldest I think DARPA set (not available in pcap format and not that ...
1
vote
0answers
14 views

Capture Packets of other devices in network [duplicate]

I'm challenged to capture packets sent from a client to the gateway in a network. is it even possible to see the packets between client and gateway for me?
0
votes
0answers
54 views

Setting the CWR TCP Flag in a Hping Command

I am trying to set the CWR flag when doing a hping command to another machine. I can set all the other flags, (Eg -S, -F etc) but I can't find any example of the CWR flag. I've checked Man Pages and ...