Tcpdump
Tcpdump is my favorite network utility of all time. It is a CLI-based packet-capturing utility, and a very powerful utility at that. Tcpdump allows us to look at any traffic, either live or precaptured, and perform deep analysis on the full protocol stack from Layer 1 to Layer 7. You can see anything you ever wanted to know about a packet with tcpdump.
As a security and network guy, every time there was an issue, the network was always blamed. I would use tcpdump to prove the network innocent almost every time. Remember, the network doesn't ever lie, and tcpdump can prove its innocence.
The first thing you will notice with tcpdump is that there are a lot of options:
One of the most important thing you can learn about tcpdump is how ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access