Practical Linux Security Cookbook - Second Edition

How to do it...

Once tcpdump has been installed, we can start using it by simply running the command tcpdump:

1. When we simply run tcpdump, it will start capturing all the packets sent or received on any interface.

2. If we want to capture the packets that are only on a specific interface, we can do the same as shown in the following screenshot:

3. The preceding command will capture all the packets received on the defined interface, until manually stopped. If we wish to capture a specific count of packets, we can do so by using the -c option, ...