Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Rotating per packets receiving by TCPDUMP

How can I use 'tcpdump' command to capture and save each received packets to separate files (having rotatation per packet without losing any packets).

like image 454
αғsнιη Avatar asked Oct 18 '22 02:10

αғsнιη


1 Answers

How about saving dump to a file and then splitting that to separate files?

$ sudo tcpdump -c 10 -w mycap.pcap
tcpdump: data link type PKTAP
tcpdump: listening on pktap, link-type PKTAP (Packet Tap), capture size 65535 bytes
10 packets captured

you'll need to have wireshark installed for this to work (e.g. with brew install wireshark on Mac or apt-get on Ubuntu)

$ editcap -c 1 mycap.pcap output.pcap 

10 packets captured -> 10 files created

$ ls -la output* | wc -l
  10
like image 169
Ivan Avatar answered Oct 21 '22 02:10

Ivan



Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!