Glossary: Security Monitoring and Automation

tcpdump

Also written: tcpdump -A, tcpdump -w, tcpdump -r

The classic command-line packet capture tool and analyzer. `-i` picks the interface, `-w` writes a pcap file, `-r` reads one, `-A` prints contents as text, and a capture filter such as 'tcp port 80' limits what is saved.