Useful tcpdump commands

Free AI web copilot to create summaries, insights and extended knowledge, download it at here

1233

Abstract

th Berkeley Packet Filters and such — but mostly I can get that information from my firewall logs. It just depends what I am doing. I was using some of these commands for tracking the success of my <a href="https://2ndsightlab.com/cloud-penetration-testing.html">penetration test</a> exploit attempts. :-)</p><p id="bac3">View all traffic except from an ip:</p><div id="bca8"><pre><span class="hljs-attribute">sudo</span> tcpdump host not <span class="hljs-number">1.2.3.4</span></pre></div><p id="317a">View all traffic except a port:</p><div id="0793"><pre><span class="hljs-attribute">sudo</span> tcpdump port not <span class="hljs-number">22</span></pre></div><p id="bb66">Don’t resolve domain names (-n)</p><div id="825e"><pre><span class="hljs-attribute">sudo</span> tcpdump -n host not <span class="hljs-number">1.2.3.4</span></pre></div><p id="5241">Follow for updates.</p><p id="4a3a">Teri Radichel | <i>© <a href="https://2ndsightlab.com/?source=post_page---------------------------">2nd Sight Lab</a> 2023</i></p><div id="8b5f"><pre><span class="hljs-section">About Teri Radichel:

⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Se
# Options
curity Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab</pre></div><div id="caae"><pre><span class="hljs-section">Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span>
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation</pre></div><div id="46f6"><pre>Follow <span class="hljs-keyword">for</span> more stories like <span class="hljs-keyword">this</span>:

❤️ Sign Up my Medium Email List ❤️ Twitter: <span class="hljs-meta">@teriradichel</span> ❤️ LinkedIn: https:<span class="hljs-comment">//www.linkedin.com/in/teriradichel</span> ❤️ Mastodon: <span class="hljs-meta">@teriradichel</span><span class="hljs-meta">@infosec</span>.exchange ❤️ Facebook: 2nd Sight Lab ❤️ YouTube: @2ndsightlab</pre></div><figure id="7286"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*4oxP4LXk8l8c3mpRvO7ejg.png"><figcaption></figcaption></figure></article></body>

Many cheatsheets for tcpdump exist. This is my personal list.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

These are just a few tcpdump commands I used recently. I’ll probably add more to this over time. I’ve had to use a lot more extensive commands than this like those with Berkeley Packet Filters and such — but mostly I can get that information from my firewall logs. It just depends what I am doing. I was using some of these commands for tracking the success of my penetration test exploit attempts. :-)

View all traffic except from an ip:

sudo tcpdump host not 1.2.3.4

View all traffic except a port:

sudo tcpdump port not 22

Don’t resolve domain names (-n)

sudo tcpdump -n host not 1.2.3.4

Follow for updates.

About Teri Radichel:
~~~~~~~~~~~~~~~~~~~~
⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab

Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation

Follow for more stories like this:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
❤️ Sign Up my Medium Email List
❤️ Twitter: @teriradichel
❤️ LinkedIn: https://www.linkedin.com/in/teriradichel
❤️ Mastodon: @teriradichel@infosec.exchange
❤️ Facebook: 2nd Sight Lab
❤️ YouTube: @2ndsightlab