This done by using the boolean “ and” word. The host and port options can both be used together to refine the analysis even further. Tcpdump -i wlan0 port 80 tells tcpdump to listen on my Pi’s wireless adaptor for traffic on port 80. If you do not know where the traffic is coming from, then you could limit the analysis to a particular port. In the above example tcpdump is listening on wlan0 for traffic from 192.168.0.1 With an interface selected (wlan0 aka my wireless adapter), the traffic selection can be limited further by telling tcpdump to watch traffic from a particular host. If you know which interface your communication is taking place over then I would recommend limiting the packet dump to that interface. tcpdump -DĪs the above screen grab shows, there may be more interfaces than you expect. Tcpdump -D can be used to view the interfaces available to tcpdump. i eth0 for the ethernet port, or tcpdump can be specifically told to listen to any port using -i any. If you have multiple network interfaces (perhaps ethernet and wireless) then the -i command can be used to limit the packet dump to a specific port e.g. Tcpdump starts tcpdump running, but be prepared for a flood of information if you run tcpdump without any arguments. Note: You may need to use sudo before the commands if your user doesn’t have permission. This is fixed with sudo apt-get install tcpdump. When I tried to use the tcpdump command on Raspbian I got the message the command was not found. Tcpdump is a network packet analyser, which lets you see the conversation packets. when we load a webpage in our web browser. Normally a lot of the communication between devices is hidden away from us humans as we don’t need to see our computer ask a DNS server for the IP address for a website URL, then the sending of a GET command to the website IP etc. The communication then takes place in packets. TCP (Transmission Control Protocol) is a communication standard that devices use to talk establish communications between each other.

Open tcpdump in wireshark