Use tcptump and wireshark to capture packets and view network packets

Tcptump and wireshark work together with packet capture to check the network package. Some time ago, they have been debugging the MMS program of the Telecom isag, causing many problems. Therefore, you need to capture packets and check the problem with your MMs package. In linux, tcptump is a built-in packet capture tool, which is quite simple to use. The fact is that the process of stopping a packet capture is always stuck, which makes people feel uncomfortable. Run the command: tcpdump-I eth0-s 0-w demo/demo. cap means to capture the network packet through the eth0 Nic, and-s 0 means no limit on the network length. In this way, the network package can be completely captured. A path can be created behind-w to save the captured network package to the specified directory. I saved it to the demo under the demo directory. under the cap file. View the Analysis Network Package. Wireshark can be used. These two steps work together to capture the Network Package and view the Network Package for convenience, simplicity, and detail!