Friday, June 08, 2007

New Linux Command (tcpdump)

From the man page:

Tcpdump prints out the headers of packets on a network interface that match the boolean expression.

Example:

tcpdump -i eth0 -n dst port 389 and not src host 192.168.1.50

Dumps all traffic to port 389 that is not from ip 192.168.150

Awesome.