0

Here are this way, but only displays the data without the sender and the recipient:

tcpdump -i ath0 -X | grep -E "str1|str2"

Interest here is such a result:

ip > ip
SOMEDATA
ip > ip
SOMEDATA
ip > ip
SOMEDATA
fedorqui
  • 275,237
  • 103
  • 548
  • 598

1 Answers1

0
tcpdump -nn -q -s 0 -t -l -A port|-i

Example Output:

IP 127.0.0.1.350 > 127.0.0.1.34440: tcp 3696
E...d[@.@............^......M..F...........
.h...h.-HTTP/1.1 400 Bad Request
Server: squid/5.8
Mime-Version: 1.0
Date: Mon, 05 May 2020 12:54:49 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 3325
X-Squid-Error: ERR_PROTOCOL_UNKNOWN 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from proxy
X-Cache-Lookup: NONE from proxy:8080
Via: 1.1 proxy(squid/5.8)
Connection: close
bitdruid
  • 1
  • 2