Update of "tcpdump for windows"
Overview

Artifact ID: e451287dc6908e9f441adc3e10582d23bbdaf757
Page Name:tcpdump for windows
Date: 2014-01-27 07:10:30
Original User: rkeene
Mimetype:text/x-markdown
Parent: 1d31fb43ebf745b56b19cfd8d6d6fa5e7eae6bce
Content

tcpdump for windows

Introduction

tcpdump for windows is everything you need to run "tcpdump" on Microsoft Windows in a single portable executable.

Next Steps

The "-i" option has been modified to support IP addresses in addition to interface names. The IP address can be a local address or a remote one.

Usage

  • Basic usage:
    • C:> tcpdump -nn -i 0.0.0.0
  • Write out a capture file (which can be read by "wireshark" or "tcpdump"):
    • C:> tcpdump -i 0.0.0.0 -w capture.pcap

Full documentation for tcpdump can be found in the tcpdump(1) man page.