Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

tcpdump - resolve IP and skip resolving ports

Tags:

tcpdump

How to tell tcpdump to resolve names and leave the port numbers unresolved?

From man:

-n     Don’t convert host addresses to names.  This can be used to avoid DNS lookups.
-nn    Don’t convert protocol and port numbers etc. to names either.

setting tcpdump -nn skips the resolution for both addresses and ports.

like image 600
Jakub M. Avatar asked Nov 06 '13 09:11

Jakub M.


1 Answers

Have you tried -nnvvS (Don't resolve DNS or Port names, be more verbose when printing info, print the absolute sequence numbers)

Src: http://www.ihtb.org/security/tcpdump-explained.txt (archived, original link dead)

like image 193
Latheesan Avatar answered Nov 20 '22 23:11

Latheesan