Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [tcpdump]

tcpdump is a CLI tool for capturing and displaying packets sent and received by network devices.

466 questions
0
votes
1 answer

TCPDUMP , SSL , Android, SSL dump

I run an application on Android phone. The application connects to a webservice via internet and I want to intercept the traffic between the application and the webservice. The connection is http/ssl I don't own the webservice server. If I use…
Michael
  • 137
  • 1
  • 8
0
votes
1 answer

iptables logging packets coming from the outside world

I want to log all INPUT packets that do not originate in the LAN for audit purposes, I have a script with tcpdump basically appending to a file the result from this: tcpdump "(dst net 192.168.0.0/24 and ! src net 192.168.0.0/24)" however, I've seen…
lurscher
  • 172
  • 1
  • 3
  • 17
0
votes
1 answer

Port forwarding not working, tcpdump shows "reset connection"

I have an home web server that I use to serve a few pages for personal purposes. The server runs Ubuntu and is behind an ADSL connection, and it's working nicely. Recently I subscribed to a Hiperlan connection and added a router for it to my LAN. So…
Joril
  • 1,610
  • 1
  • 21
  • 28
0
votes
2 answers

looking for multicast traffic

We have a j2ee webapp on tomcat which is using ehcache with multicast discovery. Except it's not discovering anything. There appears to to be no multicast traffic visible on the network but we're a little unclear how to really troubleshoot it. We…
Chris Phillips
  • 254
  • 4
  • 15
0
votes
3 answers

MySQL RESET [integer]

In an audit of queries running on our databases using tcpdump and Maatkit tools, the number one query is RESET [int] Running this statement from the MySQL command line results in an error as RESET should only accept parameters master, query cache…
sreimer
  • 2,218
  • 15
  • 17
0
votes
2 answers

Connecting to Samba share over the internet

I have been trying to connect a Linux box to a remote Samba share, with no success. The Samba share is a NAS, mapped to be accessible from the Internet, and to be used as a secondary backup box. The layout has been decided by my client. The Samba…
Andres
  • 1
  • 1
  • 2
0
votes
2 answers

tcpdump over vpn/ssh

I'm redirecting tcpdump output from machine A to machine B. A and B must use a "secure" connection, using VPN or ssh tunnel. I only care about authentication, however: I don't need to protect from sniffing data. How much overhead should I expect…
Emiliano
  • 261
  • 1
  • 2
  • 10
0
votes
2 answers

tcpdump unknown device

I am trying to run tcpdum on Solaris 10 as root user. I always get unknown device - even though I am using the name provided by ifconfig -a How can I find out the right device name?
weismat
  • 343
  • 3
  • 16
0
votes
2 answers

What is a RP Paket in a tcpdump log?

I have a tcpdump log with the following entry: 14:53:31.428570 IP 10.4.65.65.16666 > 192.168.201.10.80: RP 587:687(100) ack 48545454154 win 0 My Problem is that i have never seen an RP paket before.. What does it mean? Is it kind of a reset…
Fake4d
  • 603
  • 7
  • 10
  • 16
0
votes
2 answers

unable to sniff traffic despite network interface being in monitor or promiscuous mode

I'm trying to sniff out my network's wireless traffic but am having issues. I'm able to put the card in monitor mode, but am unable to see any traffic except broadcasts, multicasts and probe/beacon frames. I have two network interfaces on this…
sybind
  • 327
  • 1
  • 4
  • 14
0
votes
2 answers

Sniff packets using tcpdump

I have a completely noob question. I want to see all packets that come to my computer from particular site (google.com). So I start tcpdump sudo tcpdump -i eth0 host google.com and enter google.com in a browser and hit enter - nothing gets…
Denys Kniazhev-Support Ukraine
  • 103
  • 5
0
votes
3 answers

How to see an application network protocol communication in real time

I would like to see the protocol used by client-server application in real-time. I'm not interested in any statistics. All I want to see is the message sent by server and the client. This is FreeBSD specific if that helps.After some googling I found…
Srikanth
  • 101
  • 2
0
votes
1 answer

How to read and create this type of TCPDUMP

I am having an issue with my tcpdump command i have created. Chances are its wrong. What i want to do is this: Run this command: tc qdisc add dev eth0 root tbf rate 6kbit latency 50ms burst 1540 run this tcpdump: sudo tcpdump host wiki and wiki2…
John Riselvato
  • 153
  • 8
0
votes
2 answers

Howto monitor traffic between IIS and MSSQL

I am trying to check how much traffic is flowing between MSSQL Server and IIS Server in different locations. There is 1 ipcop in every location and I download the tcpdump file from one firewall and search for DST=ipmssql and SRC=ipIIS but I did not…
kockiren
  • 886
  • 3
  • 14
  • 37
0
votes
3 answers

How can I log all traffic with its exact length?

I want to process all packets with their size going through our gateway server (running Debian 4.0). My idea is to use tcpdump, but I have two questions. The command I'm currently thinking of is tcpdump -i iface -n -t -q. Is it guaranteed that…
Christoph Wurm
  • 299
  • 2
  • 12
1 2 3
…
31 32