All Questions
4
questions
1
vote
1
answer
1k
views
How to use ciscodump?
In wireshark, there is this option called Cisco remote capture: ciscodump, which, from my understanding, should enable to do a tcpdump on a cisco router (for example) via SSH and get back the results ...
0
votes
1
answer
241
views
What are the specific requirements for libpcap directional capture support?
I'm using libpcap on Linux to capture network traffic from a wireless adapter (2.4 GHz). The pcap_setdirection seems to allow you to setup the capture device so that it ignores traffic originating ...
0
votes
1
answer
1k
views
how to program tcpdump to only capture packets and nothing else
I am developing a program where a .pcap file is going to be an input. However, when I run tcpdump -w someFile.pcap ,in Terminal, the .pcap file captures extra data such as timestamp, microseconds, ...
1
vote
2
answers
1k
views
How do capture filters in Wireshark work internally?
I am wondering exactly what happens internally in TShark when I use a capture filter. Specifically, let's say I have the following filter to capture multicast data:
host 224.0.26.3 && port ...