<<

Using Tcp Dump

Capturing HTTP traffic with tcpdump:

tcpdump -lnA -s 4096 -w out.log port http

-l - Make stdout line buffered
-n - Don’t convert addresses
-A show the data in ASCII
-s 4096 - capture snaplen bytes of data from each packet rather than the default of 96
-w out.log - write to a log file (use -r to read from the log file)
port http - what it says

alternatively, use
-X - show the data in hex and ascii