defnotgustavom/tcpdump repository overview

• Running:

docker run -it --rm --log-driver none --read-only --net host defnotgustavom/tcpdump tcpdump -i interface_name

Usage: tcpdump [-AbdDefhHIJKlLnNOpqStuUvxX#] [ -B size ] [ -c count ] [--count]

	[ -C file_size ] [ -E algo:secret ] [ -F file ] [ -G seconds ]

	[ -i interface ] [ --immediate-mode ] [ -j tstamptype ]

	[ -M secret ] [ --number ] [ --print ]

	[ --print-sampling nth ] [ -Q in|out|inout ] [ -r file ]

	[ -s snaplen ] [ -T type ] [ --version ]

	[ -V file ] [ -w file ] [ -W filecount ] [ -y datalinktype ]

	[ --time-stamp-precision precision ] [ --micro ] [ --nano ]

	[ -z postrotate-command ] [ -Z user ] [ expression ]

The tcpdump command is one of the most widely used command-line network packet analyzer or packets sniffer programs that is used to capture or filters TCP/IP packets that are received or transferred on a specific interface over a network.

It also provides an option to save captured packages in a file for later analysis. tcpdump is almost available in all major Linux distributions.

Over the past few years, tcpdump has been steadily improved by the excellent contributions from the Internet community (just browse through the change log -> https://github.com/the-tcpdump-group/tcpdump/blob/master/CHANGES⁠). We are grateful for all the input.

Origins of tcpdump

The program is loosely based on SMI's "etherfind" although none of the etherfind code remains. It was originally written by Van Jacobson as part of an ongoing research project to investigate and improve TCP and Internet gateway performance. The parts of the program originally taken from Sun's etherfind were later re-written by Steven McCanne of LBL. To insure that there would be no vestige of proprietary code in tcpdump, Steve wrote these pieces from the specification given by the manual entry, with no access to the source of tcpdump or etherfind.

Formerly from Lawrence Berkeley National Laboratory Network Research Group [email protected]⁠ ftp://ftp.ee.lbl.gov/old/tcpdump.tar.Z (3.4)