Glossary: TCP/IP in Depth, Part 1
tcpdump
Also written: -i, -n, -t, -e, -v, -q, -XX, -c, -w, -r
The command-line tool that captures packets on an interface and prints one line per packet. Its options pick the interface (-i), show MACs (-e), decode every field (-v), print hex (-XX), and save or read pcap files (-w, -r).
Where the book teaches it
- Chapter 1: Your packet lab and tcpdump
- Chapter 2: Reading packets: hex, header diagrams and Scapy
- Chapter 3: Ethernet frames and MAC addresses
- Chapter 5: The IPv4 header, field by field
- Chapter 6: MTU, fragmentation and path MTU discovery
- Chapter 9: IPv6 in depth
- Chapter 10: Project: the addressing side of a page load