What are the parameters for tcpdump in Linux?
Below are the parameters for the tcpdump command in Linux:
- -i: specify the network interface to listen on.
- – It is not allowed to convert IP addresses and port numbers into domain names and service names.
- -v: to display detailed output information.
- -c: Specify the number of packets to capture.
- -s: Specify the maximum length of the data packets to be captured.
- -w: Write captured packets to the specified file.
- -r: Analyze the saved packet data file.
- -A: Display the content of the captured data packets in ASCII format.
- – X: Display the contents of captured packets in a format that mixes hexadecimal and ASCII.
- Quiet mode, only display a summary of captured packets.
- Display Ethernet header information in the output.
- -tttt: Format output information using date and time.
- ttttn: format the output information using a nanosecond-level date and time.
- ttttt: Format output information using microsecond-level date and time.
- -tttttt: Format the output information using millisecond-level date and time.
- -ttttttt: Format the output information using a second-level date and time.
- -ttttttt: Format the output information using the default date and time format.
These parameters can be flexibly combined as needed to meet different requirements for network traffic analysis.