Thursday, October 13, 2011

tcpdump - for win :P

A friend of mine (thanks Kabrinsky ;) told me that there is a tcpdump for win boxes that doesn't need's instalation.

I searched... found it, and it's very nice, here are some brief tips, for me (i really don't have a good memory, soo a write stuff...to remember):

Where to find it:
hxxp://www.microolap.com/products/network/tcpdump/

usage: 
+ find your box interfaces
   tcpdump.exe -D

+ listen to everything on interface 5
   tcpdump.exe -i 5 -nn -vv

+ listen to everything on interface 5 and save it to a file
  tcpdump.exe -i 5 -nn -vv -w tt.pcap

+ listen only to some ip's and save it to a file
  tcpdump.exe -i 5 -nn -vv -w tt.pcap host 192.168.1.254 and host 192.168.1.64

+ to save all the packet data: -s 0
  tcpdump.exe -i 5 -nn -s 0 -vv -w tt.pcap host 192.168.1.254

that's it.
.
.

No comments: