Reputation: 11
I have captured packet In the Internet by using sudo tcpdump -i eth0 -w FILENAME.pcap I want to see capture file with tcpdump,I have used : tcpdump -qns 0 -A -r FILENAME.pcap The capture file looks terrible , How can I make it prettier? Thanks Sarah
Upvotes: 1
Views: 503
Reputation:
The capture file looks terrible , How can I make it prettier?
Pass the -v
flag to tcpdump, to get more verbose output? Read it with Wireshark or TShark? The default output of tcpdump looks the way it's written to look, which can be a bit cryptic; tcpdump with -v
, and Wireshark/TShark, may be a bit more verbose.
Upvotes: 2