How to write (where to download) a traffic sniffer?

Question

linux

Someone checks the computer for accessibility through the linux terminal. You need to look at the data packets. To do this, you need a traffic sniffer, tcpdump is not there, you need to feed it to the linux console and scan the packets for keywords. How to do it?

Answer 1

Download, install the tcpdump package, you can immediately install tshark.
This is if there is no GUI, if there is, then I don’t see any problems at all, install the usual wireshark and watch the traffic.

Answer 2

Comrade, are you stubborn, or what? What script? The traffic dump is removed (if on the fingers) by working with special kernel interfaces. No script can work at this level. Put tcpdump and watch the traffic. If you can't put anything - configure SPAN on the switch, connect a Unix machine there and watch the traffic there with tcpdump. If that's not possible, then get over it.