Usage parameters of the Linux packet capture tool tcpdump

Function description: dumping network transmission data. Syntax: tcpdump [-adeflnNOpqStvx] [-c packet count] [-dd] [-ddd] [-F expression file] [-I network interface] [-r packet file] [-s data packet size] [-tt] [-T data packet type] [-vv] [-w data packet file] [output data column] supplementary description: you can run the tcpdump command to list networks that have passed through the specified network. Function description:Dumping network transmission data. Syntax: Tcpdump[-AdeflnNOpqStvx] [-c <数据包数目> ] [-Dd] [-ddd] [-F <表达文件> ] [-I <网络界面> ] [-R <数据包文件> ] [-S <数据包大小> ] [-Tt] [-T <数据包类型> ] [-Vv] [-w <数据包文件> ] [Output data column]

Note:Run the tcpdump command to list the packet headers that pass through the specified network. in Linux, you must be a system administrator.

Parameters:
-A tries to convert the network and broadcast address to a name.
-C <数据包数目> After receiving the specified number of data packets, the dumping operation is stopped.
-D converts compiled data packet encoding into a readable format and dumps it to standard output.
-Dd converts the compiled data packet encoding to the C language format and dumps it to the standard output.
-Ddd converts the compiled data packet encoding to a decimal number format and dumps it to the standard output.
-E displays the connection level file header on each column of dumped data.
-F displays the internet address in numbers.
-F <表达文件> Specifies the file containing the expression.
-I <网络界面> Sends data packets using the specified network section.
-L use the buffer of the standard output column.
-N does not convert the network address of the host into a name.
-N does not list domain names.
-O does not optimize packet encoding.
-P prevents the network interface from entering the hybrid mode.
-Q: fast output. only a few transmission protocol information are listed.
-R <数据包文件> Reads data packets from a specified file.
-S <数据包大小> Set the size of each data packet.
-S: use absolute rather than relative values to list the number of TCP connections.
-T the time stamp is not displayed on the dumped data in each column.
-Tt displays unformatted timestamps on the dumped data in each column.
-T <数据包类型> Forcibly translate the data packet specified by the expression into the set data packet type.
-V displays the instruction execution process in detail.
-Vv: displays the instruction execution process in detail.
-X uses a hexadecimal code to list data packets.
-W <数据包文件> Write data packets to the specified file.