Skip to content

Glossary: Logs and Data Sources for Investigations

tcpdump

A command-line packet capture tool. Alex's capture used -i eth0 for the interface, -s 0 for whole packets and -w to save to a pcap file.

Where the book teaches it

Related terms

Packet capturetsharkCapture filter