What are the parameters for tcpdump in Linux?

Below are the parameters for the tcpdump command in Linux:

  1. -i: specify the network interface to listen on.
  2. – It is not allowed to convert IP addresses and port numbers into domain names and service names.
  3. -v: to display detailed output information.
  4. -c: Specify the number of packets to capture.
  5. -s: Specify the maximum length of the data packets to be captured.
  6. -w: Write captured packets to the specified file.
  7. -r: Analyze the saved packet data file.
  8. -A: Display the content of the captured data packets in ASCII format.
  9. – X: Display the contents of captured packets in a format that mixes hexadecimal and ASCII.
  10. Quiet mode, only display a summary of captured packets.
  11. Display Ethernet header information in the output.
  12. -tttt: Format output information using date and time.
  13. ttttn: format the output information using a nanosecond-level date and time.
  14. ttttt: Format output information using microsecond-level date and time.
  15. -tttttt: Format the output information using millisecond-level date and time.
  16. -ttttttt: Format the output information using a second-level date and time.
  17. -ttttttt: Format the output information using the default date and time format.

These parameters can be flexibly combined as needed to meet different requirements for network traffic analysis.

bannerAds