Search the web
Sign In
New User? Sign Up
sidewinder-users · Sidewinder Firewall Users
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
Want your group to be featured on the Yahoo! Groups website? Add a group photo to Flickr.

Best of Y! Groups

   Check them out and nominate your group.
Having problems with message search? Fill out this form to ensure your group is one of the first to be migrated to the new message search system.

Messages

  Messages Help
Advanced
Packet-level capture   Message List  
Reply | Forward Message #212 of 231 |
Re: [sidewinder-users] Packet-level capture

There is some discussion afoot about adding this capability to UI utilizing freeware such as Ethereal.

S

fosgood <fosgood_007@...> wrote:
tcpdump -npi [ifname, exp0 for example] -X -s220

You can throw other parameters in such as:

host 100.2.3.4 and port 80

There are some other commands that you can use to
filter it down to a specific stream as well if that
isn't good enough.

If I am looking for something specific, I will
redirect it to a file with:

> /home/dump.txt

for example and then grep for whatever I am looking
for.

- F

--- Eric Pancer <epancer@gmail.com> wrote:

> On 10/26/07, Matthew <matthew.harvey@usdoj.gov>
> wrote:
>
> > Does anyone know how to perform a packet-level
> capture on an interface
> > on a G2? To create a PCAP or similar file, that
> is.
>
> This is pretty easy. You can use tcpdump to monitor
> interfaces.
>
> Just `man tcpdump`.
>

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

Tue Oct 30, 2007 5:57 pm

ScottyVA
Offline Offline
Send Email Send Email

Forward
Message #212 of 231 |
Expand Messages Author Sort by Date

Does anyone know how to perform a packet-level capture on an interface on a G2? To create a PCAP or similar file, that is....
Matthew
matman1115
Offline Send Email
Oct 26, 2007
4:43 pm

... This is pretty easy. You can use tcpdump to monitor interfaces. Just `man tcpdump`....
Eric Pancer
vxla
Offline Send Email
Oct 26, 2007
6:03 pm

tcpdump -npi [ifname, exp0 for example] -X -s220 You can throw other parameters in such as: host 100.2.3.4 and port 80 There are some other commands that you...
fosgood
fosgood_007
Offline Send Email
Oct 30, 2007
1:53 pm

There is some discussion afoot about adding this capability to UI utilizing freeware such as Ethereal. S fosgood <fosgood_007@...> wrote: tcpdump -npi...
Scott Montgomery
ScottyVA
Offline Send Email
Oct 30, 2007
5:57 pm

As mentioned before, use tcpdump. If you would like to write the capture to a file, for viewing at a later time with tcpdump or wireshark, simply use the -w...
cjsather
Offline Send Email
Oct 30, 2007
9:08 am
Advanced

Copyright © 2009 Yahoo! Inc. All rights reserved.
Privacy Policy - Terms of Service - Guidelines - Help