P
P
pqgg7nwkd42018-12-11 16:07:46
linux
pqgg7nwkd4, 2018-12-11 16:07:46

How to sniff http traffic with tcpdump?

Good afternoon, how to get an exchange of a local machine with some remote host, but so that only the payload is issued, without incomprehensible tinsel.
Now I use:
tcpdump -A -i any 'host xxxx' -vvv
But a lot of incomprehensible information is displayed, and the payload among it is displayed several times.

Answer the question

In order to leave comments, you need to log in

2 answer(s)
V
vman, 2018-12-11
@pqgg7nwkd4

I myself use this option
I recommend using tcpflow for http sniffing, everything is done more competently there. Example to use
tcpflow -p -c -i eth0 port 80

V
Vladimir Kuts, 2018-12-11
@fox_12

Refine the request with parameters (port, type (tcp / udp), host, etc.)
or use ngrep with the necessary filters (port, regular expression for content, etc.)
or tools such as wireshark to analyze packets in the gui

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question