M
M
mad_god2015-10-12 18:07:46
network hardware
mad_god, 2015-10-12 18:07:46

How to save pcap packets remotely?

There is a TP-Link WR741ND V4 router on which openwrt is safely installed.
With tcpdump, network packets are saved, but there is not much memory left, only 500KB. Therefore, I would like to save the package file not on the router itself, but on the PC.
Tell me, please, in which direction is it better to dig? Should I install samba or already have built-in methods?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
M
mad_god, 2015-10-14
@mad_god

So, the problem is still solved.
My method is to run on the local machine
ncat -l 4444 > file.pcap
where 4444 is the port
and run tcpdump with the -w- option,
which allows the output to be binary, which can be piped
to the command | nc ip port
tcpdump -vvv -w- | nc ip 444
You must also specify the number of packets to be saved and the interface, other parameters according to the situation.

Q
quik, 2015-10-13
@quik

I think on openwrt it is possible to install the nfs-common package, mount a remote folder via nfs and write a dump there.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question