How do you use TCPDump?

To: debian-user@lists.debian.org
Subject: How do you use TCPDump?
From: Jason Hsu <jhsu802701@jasonhsu.com>
Date: Wed, 2 Mar 2011 22:00:41 -0600
Message-id: <[🔎] 20110302220041.35071bf9.jhsu802701@jasonhsu.com>

I have it installed, and I can look up the parameters in the command.

What I don't understand is how I use it to investigate intrusions.  Can someone shed some light on this?

-- 
Jason Hsu <jhsu802701@jasonhsu.com>

Reply to:

Follow-Ups:
- RE: How do you use TCPDump?
  - From: Mike Viau <viaum@sheridanc.on.ca>
- Re: How do you use TCPDump?
  - From: shawn wilson <ag4ve.us@gmail.com>

Prev by Date: PasswordAuthentication option in /etc/ssh/sshd_config
Next by Date: RE: How do you use TCPDump?
Previous by thread: Re: PasswordAuthentication option in /etc/ssh/sshd_config
Next by thread: RE: How do you use TCPDump?
Index(es):
- Date
- Thread