Answer the question
In order to leave comments, you need to log in
How to sniff http traffic with tcpdump?
Good afternoon, how to get an exchange of a local machine with some remote host, but so that only the payload is issued, without incomprehensible tinsel.
Now I use:
tcpdump -A -i any 'host xxxx' -vvv
But a lot of incomprehensible information is displayed, and the payload among it is displayed several times.
Answer the question
In order to leave comments, you need to log in
I myself use this option
I recommend using tcpflow for http sniffing, everything is done more competently there. Example to usetcpflow -p -c -i eth0 port 80
Refine the request with parameters (port, type (tcp / udp), host, etc.)
or use ngrep with the necessary filters (port, regular expression for content, etc.)
or tools such as wireshark to analyze packets in the gui
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question