1 Replies - 411 Views - Last Post: 13 March 2016 - 12:56 PM

#1 sara25  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 5
  • Joined: 03-March 16

How can I use tcpdump to see capture file?

Posted 13 March 2016 - 12:25 PM

I have captured packet In the Internet by using sudo tcpdump -i eth0 -w FILENAME.pcap I want to see capture file with tcpdump,I have used : tcpdump -qns 0 -A -r FILENAME.pcap The capture file looks terrible , How can I make it prettier?
Thanks Sarah
Is This A Good Question/Topic? 0
  • +

Replies To: How can I use tcpdump to see capture file?

#2 no2pencil  Icon User is offline

  • Professor Snuggly Pants
  • member icon

Reputation: 6544
  • View blog
  • Posts: 30,650
  • Joined: 10-May 07

Re: How can I use tcpdump to see capture file?

Posted 13 March 2016 - 12:56 PM

Have you looked over tcpdump's options in the man pages? You can specify pretty good down to exactly what you are looking for, such as tcp vs udp protocol types. Additionally you can grep for specific output. As far as the layout, it comes how it comes, & would be up to some scripting magic to prettify it, such as awk, cut, grep, & so forth.
Was This Post Helpful? 0
  • +
  • -

Page 1 of 1