Thursday, March 15, 2018

tcpdump filter question

I need to capture udp and icmp traffic using tcpdump. I'm using the following command: sudo tcpdump -vvv "udp or icmp" Using this command and running traceroute blah i get only udp traffic. When running sudo tcpdump -vvv "icmp" with traceroute blah I get only icmp traffic. Is sudo tcpdump -vvv "udp or icmp" the correct syntax to get udp and icmp traffic in the same capture? Thanks!



No comments:

Post a Comment