Comments on: How to capture and analyze packets with tcpdump command on Linux

By: Todd S

Todd S — Mon, 28 Jun 2021 20:29:20 +0000

Nice article, very informative.

By: Bashir

Bashir — Mon, 18 May 2020 11:19:47 +0000

Hi, Thanks for the great article. I was wandering if tcpdump could be used to monitor network traffic over a period of time and only report on tcp/udp traffic showing ports of only unique transactions. I.E. only show an ssh session between the localhost and remote host once even if there has been multiple sessions? i wold like to see src ip/dst, protocol and port only between a linux server and remote hosts

By: Sum Yung Gai

Sum Yung Gai — Tue, 07 Jan 2020 16:24:57 +0000

In reply to Shivraj. For analyzing a packet, I would suggest using something like Wireshark. There is plenty of information out there on how to do packet analysis. It will entail your reading several documents, though, including the RFC's on IP, ICMP, UDP, and TCP. Additionally, you would do very well to read the 802.3 Ethernet specifications, since virtually all LAN's are Ethernet-based nowadays.

By: Shivraj

Shivraj — Tue, 19 Nov 2019 12:31:56 +0000

Hi , you are teaching how to capture packet not to analyzing it .So kindly teach us how to analyze a packet