====== tcpdump======
[[linux:linux|{{ :dokuwiki:tux.png?120|}}]]


===== context=====
dit document geeft enkele voorbeelden van tcpdump

==== SSH/SNMP ====
<code>tcpdump port 22 or port 161 and src <ipadres van bron server> -vvv</code>
scan verbose op SSH en SNMP verkeer
==== ping ====
<code>tcpdump -i <NIC> host <dest> and icmp</code>
==== netwerk ====
<code>tcpdump -i <NIC> net <CDR></code>

==== WinDump ====
  * Windows equivalent, beschikbaar op [[https://www.winpcap.org/windump/install/|WinDump website]]


===== meer info =====
  * [[https://danielmiessler.com/study/tcpdump/|TCPdump primer]]
  * [[https://linuxconfig.org/how-to-use-tcpdump-command-on-linux|tcpdump command line examples]]
{{tag>Linux}}