Tcpdump
From Forensics Wiki
| tcpdump | |
|---|---|
| Maintainer: | The Tcpdump team |
| OS: | Linux |
| Genre: | Network forensics |
| License: | Template:BSD license |
| Website: | www.tcpdump.org |
tcpdump is a common packet sniffer for Unix-like operating systems (Linux, BSD, etc).
Overview
tcpdump prints out a description of the contents of packets on a network interface that match the boolean expression. It can also save the packet data to a file for later analysis.