The tcpdump tag has no wiki summary.
0
votes
0answers
33 views
packets seen in ifconfig but not on tcpdump [migrated]
On ifconfig I can see the number of packets sent/received with the tx/rx values. With that interface on promiscuous mode, if I turn on tcpdump on that interface I should see all packets sent/received ...
2
votes
1answer
57 views
Convert BFR to PCAP without loosing nano-second resolution
i have a BFR file from a customer that contains nano-second resolution. OI can convert it via tshark, but it does not retain the nano-second resolution on the end pcap file. Is there a way to convert ...
-1
votes
1answer
83 views
Filter mobile devices MAC address
I am monitoring my network and I would like to know how many mobile devices are there. I am already filtering probe requests and matching MAC adresses with OUI identifier. However I have few doubts ...
-2
votes
1answer
77 views
Advertised Window Size
I have one sender and one receiver node, connected through one switch. I am collecting advertised window size from both tcpdump and kernel. I am running tcp dump on the receiver side, to watch for ...
1
vote
1answer
44 views
TCP DUMP 4 lines i do not understand, please help?
I need support understanding these 4 lines. looks like tcp dump but im actully not understanding what exactly is happening here.
13:13:22.407445 IP 192.168.246.128.54955 > 192.168.246.13.80: S ...
1
vote
1answer
104 views
How the frame size getting below 64 bytes
I did packet capture on my system, where i did packet capture on wireless adapter. i seen some frame size below than 64 bytes like 54 bytes and other frame size as well. I seen some document frame ...
3
votes
4answers
4k views
Packet sniffing promiscuously on MacBook Air
I'm on a MacBook air, and I got a book form the library about wireless network security. I've been following pretty diligently, but it seems like no matter what I do I cannot capture packets of other ...
2
votes
1answer
11k views
tcpdump (-i any) with vlan
I have a question regarding tcpdump (capturing all interfaces) and a strange capture I see.
Environment:
2 Linux devices connected and configured with VLAN TAG (802.1q). I am pinging between the 2 ...
