February 2019
Beginner to intermediate
302 pages
7h 58m
English
We can use Tcpdump to view the user agents by using the tcpdump –r <file> -nn -A -s1500 -l | grep "User-Agent:" | sort –u command, as shown in the following screenshot:

As mentioned, the user agents determine the web browser. This information can be useful during a forensic investigation. Furthermore, we can use tcpdump to see all the source and destination IP addresses within the capture file.
To obtain a list of source IP addresses with the source ports, we can use the following command:

To view all the destination IP addresses and ...
Read now
Unlock full access