CODEWITHSUNDEEP
tcpdump
Jakub M.
Jakub M.

Reputation: 33867

tcpdump - resolve IP and skip resolving ports

How to tell tcpdump to resolve names and leave the port numbers unresolved?

From man:

-n     Don’t convert host addresses to names.  This can be used to avoid DNS lookups.
-nn    Don’t convert protocol and port numbers etc. to names either.

setting tcpdump -nn skips the resolution for both addresses and ports.

Upvotes: 26

Views: 100345

Answers (1)

Latheesan
Latheesan

Reputation: 24116

Have you tried -nnvvS (Don't resolve DNS or Port names, be more verbose when printing info, print the absolute sequence numbers)

Src: http://www.ihtb.org/security/tcpdump-explained.txt (archived, original link dead)

Upvotes: 20

Related Questions