https://notes.manzolo.it/tags/tcpdump/Recent content in Tcpdump on Manzolo Code NotesHugo -- 0.152.2en-USSat, 04 Oct 2025 13:35:00 +0200https://notes.manzolo.it/2025/10/network-traffic-analysis-with-tcpdump-debian/ubuntu/Sat, 04 Oct 2025 13:35:00 +0200https://notes.manzolo.it/2025/10/network-traffic-analysis-with-tcpdump-debian/ubuntu/<h1 id="network-traffic-analysis-with-tcpdump-debianubuntu">Network Traffic Analysis with tcpdump (Debian/Ubuntu)</h1> <h2 id="introduction">Introduction</h2> <p><code>tcpdump</code> is a lightweight, command-line packet capture tool for analyzing network traffic on Linux systems. It’s ideal for server environments or quick diagnostics without a GUI, complementing tools like Wireshark. This guide covers installing <code>tcpdump</code> on Debian/Ubuntu, capturing traffic on a network interface, applying filters, saving captures to PCAP files, and analyzing them with <code>tcpdump</code> or Wireshark. It includes examples for monitoring HTTP traffic, debugging connectivity, and remote capturing.</p>