Tcpdump Tutorial for Beginners | Kali Linux Tools

Описание: Tcpdump Tutorial for Beginners | Kali Linux Tools :- tcpdump is A Powerful Network Packet Analyzer which is used to capture or filter TCP/IP packets that are received or transferred over a network on a specific interface. Commands shown in this video are written below :-

1) Capture All Traffic:

$ sudo tcpdump -i eth0

Capture traffic on interface eth0 and display packet details in real-time.

2) Save Captured Traffic to a File:

$ sudo tcpdump -i eth0 -w capture.pcap

Capture traffic on eth0 and save it to a file named "capture.pcap" for further analysis.

3) Display Captured Traffic:

$ tcpdump -r capture.pcap

Read and display packet details from a previously captured file "capture.pcap".

4) Filter Traffic by Source IP:

$ tcpdump src 192.168.0.1

Capture packets originating from a specific source IP address, such as 192.168.0.1.

5) Filter Traffic by Destination IP:

$ tcpdump dst 192.168.0.1

Capture packets destined for a specific IP address, e.g., 192.168.0.1.

6) Filter Traffic by Port:

$ tcpdump port 80

Capture packets with a specific port number, like port 80 (HTTP).

7) Filter Traffic by Protocol:

$ tcpdump icmp

Capture packets using a specific network protocol, such as ICMP (ping).

8) Display Traffic in ASCII:

$ tcpdump -A

Display packet contents in ASCII format for better readability.

9) Display Traffic in Hexadecimal:

$ tcpdump -X

Show packet contents in hexadecimal and ASCII format.

#tcpdump
#kalilinux
#cybersecurity