How to tell tcpdump
to resolve names and leave the port numbers unresolved?
From man:
-n Don’t convert host addresses to names. This can be used to avoid DNS lookups.
-nn Don’t convert protocol and port numbers etc. to names either.
setting tcpdump -nn
skips the resolution for both addresses and ports.
Have you tried -nnvvS
(Don't resolve DNS or Port names, be more verbose when printing info, print the absolute sequence numbers)
Src: http://www.ihtb.org/security/tcpdump-explained.txt (archived, original link dead)
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With