LOADING N0PERM…
High-performance CLI packet analyzer built on libpcap. Essential for headless server diagnostics, network forensics, and packet capture ingestion.
A standard PACKET_ANALYSIS utility used across offensive reconnaissance, packet forensics, and defensive system administration.
Direct visibility into network interfaces, protocol frames, access controls, or filesystem structures without graphical overhead.
During live system triage, initial reconnaissance, forensic capture inspection, or baseline configuration auditing.
# Debian / Ubuntu
sudo apt install tcpdump
# RHEL / Fedora
sudo dnf install tcpdump
# macOS (pre-installed, or via Homebrew)
brew install tcpdumpCommon capture commands (static educational reference):
- Capture on specific interface: tcpdump -i eth0 -nn
- Capture to PCAP file: tcpdump -i eth0 -w capture.pcap
- Filter SYN packets: tcpdump -i any 'tcp[tcpflags] & tcp-syn != 0'
- Filter specific host and port: tcpdump -i eth0 host 192.168.1.10 and port 443