tcpdump?

[John O Laoi <brianolaoi@gmail.com>]

> #tcpdump port 4957
> I want to obtain the payload data to see what is realy being exchanged
> between my Debian server and the outside network element . Can you please
> let me know how I can modify my command ?

Try
tcpdump  host <IP-addr-deb-server>  and  port  4957

This will grab all packets to and from the server, which are to or
from port 4957

If you want traffic in one direction only, you can use "src host" or
"dst host" instead of "host", and/or
"src port" or "dst port" instaed of "port".

You could add  -s 0   to ensure you grab entire packets regardless of
size, and -v, -vv or -vvv if you need more details on packets.


John