I want to print all HTTP POST requests including the body of the requests in ASCII to the console with tcpdump. How can I do that?
Asked
Active
Viewed 5,259 times
4
-
Try : tcpdump -c 20 -s 0 -i eth1 -A host 192.168.1.1 and tcp port http – L Y E S - C H I O U K H Feb 23 '18 at 12:03
-
Using tcpflow : tcpflow -p -c -i eth0 port 80 | grep -oE '(GET|POST|HEAD) .* HTTP/1.[01]|Host: .*' – L Y E S - C H I O U K H Feb 23 '18 at 12:07
-
1Or use tshark. The short answer is, you can't do this easily with TCPDump. – David Hoelzer Feb 24 '18 at 12:55